Your message dated Fri, 26 Aug 2016 10:27:11 +0000
with message-id <[email protected]>
and subject line Bug#826101: fixed in mat 0.6.1-3
has caused the Debian Bug report #826101,
regarding mat doesn't remove metadata in embedded images in PDFs
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
826101: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=826101
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
package: mat
severity: important
tags: security upstream
forwarded: https://labs.riseup.net/code/issues/11067
Hi,
https://digitalcourage.de/blog/2016/using-tails-be-careful-embedded-metadata
explains how mat fails to do what it's supposed to do, namely removing
embedded meta data.
I havent't verifed this myself, but appearantly it doesnt remove
metadata from images embedded in PDFs.
So basically the core feature of mat is partly broken :/
I wonder if similar bugs happen with other recursive formats, like an
OpenDocument text embedding an image or embedding a pdf embedding an
image or a zip file containing a zip file containing a .odt file
containing an pdf containing an image…
--
cheers,
Holger
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: mat
Source-Version: 0.6.1-3
We believe that the bug you reported is fixed in the latest version of
mat, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
intrigeri <[email protected]> (supplier of updated mat package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 26 Aug 2016 08:40:53 +0000
Source: mat
Binary: mat
Architecture: source
Version: 0.6.1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Privacy Tools Maintainers
<[email protected]>
Changed-By: intrigeri <[email protected]>
Closes: 826101 832479
Description:
mat - Metadata anonymisation toolkit
Changes:
mat (0.6.1-3) unstable; urgency=medium
.
* Update documentation of recommended packages in README.Debian.
* debian/copyright: use HTTPS URL.
* Promote gir1.2-poppler-0.18 to Depends: even though it is supposed
to be an optional dependency, needed only for PDF support, MAT crashes
if it not installed. (Closes: #832479)
* New patch: disable PDF support. (Closes: #826101)
Checksums-Sha1:
c65782f83d38cb5ef20f9fe26d3d80ee51af7e9d 2077 mat_0.6.1-3.dsc
21b1ed34fb7c17673466e8542e0ac564d49093e9 13648 mat_0.6.1-3.debian.tar.xz
Checksums-Sha256:
aa4d2740c5b7bc36b72f0dd3b67bd7b522e11aa337f44f1e5d5465f9c29d667c 2077
mat_0.6.1-3.dsc
0c87284cb0dfd420d97e76e9c3b29d0a1e5df23e651b6f1de911e06243b3baac 13648
mat_0.6.1-3.debian.tar.xz
Files:
54a4f26f43e847136c995312bbc0a864 2077 python optional mat_0.6.1-3.dsc
f28f12f6a49e9744a9fa4ac54b99f713 13648 python optional
mat_0.6.1-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=bZc4
-----END PGP SIGNATURE-----
--- End Message ---
