[Pkg-privacy-maintainers] Bug#826101: mat doesn't remove metadata in embedded images in PDFs

[Holger Levsen]

package: mat
severity: important
tags: security upstream
forwarded: https://labs.riseup.net/code/issues/11067

Hi,

https://digitalcourage.de/blog/2016/using-tails-be-careful-embedded-metadata
explains how mat fails to do what it's supposed to do, namely removing
embedded meta data.

I havent't verifed this myself, but appearantly it doesnt remove
metadata from images embedded in PDFs.

So basically the core feature of mat is partly broken :/

I wonder if similar bugs happen with other recursive formats, like an
OpenDocument text embedding an image or embedding a pdf embedding an
image or a zip file containing a zip file containing a .odt file
containing an pdf containing an image…


-- 
cheers,
	Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 811 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-privacy-maintainers/attachments/20160602/af1d11ab/attachment.sig>