Copied from
debian sid in
Primary Archive for Debian GNU/Linux
Changelog
libimage-exiftool-perl (12.16+dfsg-2) unstable; urgency=medium
* Add patch CVE-2021-22204.patch, taken from upstream release 12.24.
The patch fixes CVE-2021-22204: Improper neutralization of user data in
the DjVu file format in ExifTool versions 7.44 and up allows arbitrary
code execution when parsing the malicious image.
Thanks to William Bowling for the bug report on Launchpad.
(Closes: #987505) (LP: #1925985)
-- gregor herrmann <email address hidden> Sat, 24 Apr 2021 22:40:21 +0200