Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8 MGASA-2022-0381 Moderate: Command Injection in perl-Image-ExifTool

mageia
Calendar Grey October 23, 2022
Dist Mageia Esm H88
MGASA-2022-0382 addresses a security flaw in python-Pillow, patching a remote code execution vulnerability. Discover details about this essential update.
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection

Summary

lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection. (CVE-2022-23935)

References

- https://bugs.mageia.org/show_bug.cgi?id=29999

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/BKMOJHTMTSAYV7B2A27CBMM7IBAZIRWE/

- https://www.cve.org/CVERecord?id=CVE-2022-23935

Topics%20covered

Topics Covered

security advisory moderate command injection mageia perl-exiftool

Resolution

SRPMS

- 8/core/perl-Image-ExifTool-12.0.0-1.2.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 23 Oct 2022
URL: https://advisories.mageia.org/MGASA-2022-0381.html
Type: security
CVE: CVE-2022-23935

Topics%20covered

Topics Covered

security advisory moderate command injection mageia perl-exiftool

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here