UbuntuUpdates.org

Package "libimage-exiftool-perl"

Name: libimage-exiftool-perl

Description:

library and program to read and write meta information in multimedia files
Latest version: 10.80-1ubuntu0.1
Release: bionic (18.04)
Level: security
Repository: universe
Homepage: https://owl.phy.queensu.ca/~phil/exiftool/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libimage-exiftool-perl"

All arch deb package
APT INSTALL

Other versions of "libimage-exiftool-perl" in Bionic

Repository Area Version
base universe 10.80-1
updates universe 10.80-1ubuntu0.1

Changelog

Version: 10.80-1ubuntu0.1 2021-06-10 21:06:23 UTC

  libimage-exiftool-perl (10.80-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Arbitrary code execution
    - debian/patches/CVE-2021-22204.patch: Improper neutralization of user
      data in the DjVu file format in ExifTool versions 7.44 and up allows
      arbitrary code execution when parsing the malicious image. (LP: #1925985)
      Thanks to William Bowling for the bug report on Launchpad.
      Thanks to Gregor Herrmann for backporting the patch.
      From debian release 12.16+dfsg-2.
    - CVE-2021-22204

 -- hugo buddelmeijer <email address hidden> Wed, 09 Jun 2021 20:39:41 +0200
1925985 CVE-2021-22204
CVE-2021-22204 Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malici


About   -   Send Feedback to @ubuntu_updates