[Bug 2045028] New: CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check

https://bugzilla.redhat.com/show_bug.cgi?id=2045028

            Bug ID: 2045028
           Summary: CVE-2022-23935 perl-Image-ExifTool:
                    lib/Image/ExifTool.pm in ExifTool before 12.38
                    mishandles a $file =~ /\|$/ check
           Product: Security Response
          Hardware: All
                OS: Linux
            Status: NEW
         Component: vulnerability
          Keywords: Security
          Severity: low
          Priority: low
          Assignee: security-response-team(a)redhat.com
          Reporter: psampaio(a)redhat.com
                CC: perl-devel(a)lists.fedoraproject.org, spotrh(a)gmail.com
  Target Milestone: ---
    Classification: Other



lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/
check.

https://github.com/exiftool/exiftool/commit/74dbab1d2766d6422bb05b033ac66...


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2045028

[Bug 2045028] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check

https://bugzilla.redhat.com/show_bug.cgi?id=2045028

Pedro Sampaio <psampaio(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends On|                            |2045030, 2045029





Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=2045029
[Bug 2045029] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in
ExifTool before 12.38 mishandles a $file =~ /\|$/ check [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2045030
[Bug 2045030] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in
ExifTool before 12.38 mishandles a $file =~ /\|$/ check [epel-all]
-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2045028

[Bug 2045028] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check

https://bugzilla.redhat.com/show_bug.cgi?id=2045028



--- Comment #1 from Pedro Sampaio <psampaio(a)redhat.com&gt; ---
Created perl-Image-ExifTool tracking bugs for this issue:

Affects: epel-all [bug 2045030]
Affects: fedora-all [bug 2045029]


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2045028

[Bug 2045028] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check

https://bugzilla.redhat.com/show_bug.cgi?id=2045028



--- Comment #2 from Product Security DevOps Team <prodsec-dev(a)redhat.com&gt; ---
This CVE Bugzilla entry is for community support informational purposes only as
it does not affect a package in a commercially supported Red Hat product. Refer
to the dependent bugs for status of those individual community products.


-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2045028

[Bug 2045028] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check

https://bugzilla.redhat.com/show_bug.cgi?id=2045028

Product Security DevOps Team <prodsec-dev(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |UPSTREAM
             Status|NEW                         |CLOSED
        Last Closed|                            |2022-01-25 14:30:44




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2045028

[Bug 2045028] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check

https://bugzilla.redhat.com/show_bug.cgi?id=2045028
Bug 2045028 depends on bug 2045030, which changed state.

Bug 2045030 Summary: CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool
before 12.38 mishandles a $file =~ /\|$/ check [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2045030

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |NEXTRELEASE




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2045028

[Bug 2045028] CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check

https://bugzilla.redhat.com/show_bug.cgi?id=2045028
Bug 2045028 depends on bug 2045029, which changed state.

Bug 2045029 Summary: CVE-2022-23935 perl-Image-ExifTool: lib/Image/ExifTool.pm in ExifTool
before 12.38 mishandles a $file =~ /\|$/ check [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2045029

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ON_QA                       |CLOSED
         Resolution|---                         |ERRATA




-- 
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2045028