From nobody Fri Mar 25 14:57:38 2022 X-Original-To: ports-bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 0BF781A20637 for ; Fri, 25 Mar 2022 14:57:39 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4KQ4vQ5zZ9z562M for ; Fri, 25 Mar 2022 14:57:38 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id AEDBD692B for ; Fri, 25 Mar 2022 14:57:38 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 22PEvcsu035247 for ; Fri, 25 Mar 2022 14:57:38 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 22PEvciJ035246 for ports-bugs@FreeBSD.org; Fri, 25 Mar 2022 14:57:38 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 262414] graphics/p5-Image-ExifTool-devel: Update to 12.40 Date: Fri, 25 Mar 2022 14:57:38 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: devnull@apt322.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: ports-bugs@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Ports bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-ports-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports-bugs@freebsd.org X-BeenThere: freebsd-ports-bugs@freebsd.org MIME-Version: 1.0 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1648220258; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=y2slQnS463O/9qNaio1JEXMIMaCYCG0OPaiuIBy2wL8=; b=cuoTRLFnrumpXy2oPfBxovoICW1w+dE3lAdlMb0ssSgE3Y5+W5HnI06vXM8r+hsuArcILa Sn402WmvWdXeUOKiW1Y+rjzwOJvYJaoL/HEellsNqFhWWuiLVdcnZwXqT+sy8xMP58FBny Ac42gPI8LrbsEqrhvPmPL+MhSsrUHV2qVk97FY0aHZbaQjl130875E9Wu2KWRkmgR3D+aR pz5EwGii8yEqKL6ffX6uuVdXb4fzjVj/EdHUDKmhKRdvcgN0028cFibDcgdM1Ojxk9mPTr lylmjAEIZdBwlNK+ERUDOOD6HE70mHH/Oed9sVVQJ6E92Znk4s1iGWz+fswe7Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1648220258; a=rsa-sha256; cv=none; b=cgyUZ6FuaWLGbPTxAqFBgp0q4vhVNQ3rkG/LpaibDfnpzPFxi/MKuBjElZj/Jph+XTy9zJ GRdTp8bGbODfqeQKpmFYiHqujKwCvI9lJ3pvRw/LZMgIWi27A23xg20+WVV5Ou+f1RTSrk zJegsWgKo8QUt8Nhy98jNjJ3Uwfw4cKy1Vu6IuWLe6EVwuxr3RPezyGAnJMVmqF2xf4mLk EzuC8MDCkGVVUZujYult3LcfwYVSysAuWTNI/fPe81RNHZfZq+GeoKzKrSsmN1IgE5Ssai fiySNNcOD1pIZZsp/X8imlIAG7FIgGkRyGmHJCFWPlosgkNvvGmYkR/CcBzibQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D262414 Rafael Grether changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |devnull@apt322.org --- Comment #1 from Rafael Grether --- @Reporter, I think you need to set the patch flag to ? for the maintainer to approve. There is a security issue involved: CVE-2022-23935, leading to command injection. So, we'll need security/vuxml entries for these along with additional information from upstream on their nature, including CVE and other upstream (issue, pr, commit) reference links where available. If you could take care of the addition of security/vuxml entries that would= be great. @Maintainer, there is a security issue involved. I am the graphics/p5-Image-ExifTool maintainer. If you want, I can take over this port too, if you want this, please let me know. --=20 You are receiving this mail because: You are the assignee for the bug.=