Re: DSA-3708-1 mat -- security update (What are MAT users to do)?

From	Stephen Dowdy <sdowdy@ucar.edu>
Newsgroups	linux.debian.security
Subject	Re: DSA-3708-1 mat -- security update (What are MAT users to do)?
Date	2016-11-13 17:30 +0100
Message-ID	<sD5Pj-2Gi-23@gated-at.bofh.it> (permalink)
References	<sBMOJ-7gR-1@gated-at.bofh.it> <sD190-7Yp-21@gated-at.bofh.it> <sD2oq-jd-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

> On Sun, Nov 13, 2016 at 5:47 AM, intrigeri <intrigeri@debian.org> wrote:
> Robert Haist:
> > For PDFs you can use exiftool from the libimage-exiftool-perl to remove
> > metadata:
> >       exiftool -all= example.pdf
> > This works for me.
>
> Does this address the problem (metadata in embedded images) that
> triggered us from removing this functionality from MAT?

Assuming the documentation is correct, the manpage for exiftool states:

>            3) Changes to PDF files are reversible because the original
information is never actually deleted from the file.  >               So
ExifTool alone may not be used to securely edit metadata in PDF files.

that sounds like a "NO".  :-(

--stephen



-- 
Stephen Dowdy  -  Systems Administrator  -  NCAR/RAL
303.497.2869   -  sdowdy@ucar.edu        -  http://www.ral.ucar.edu/~sdowdy/

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

DSA-3708-1 mat -- security update (What are MAT users to do)? gwmfms06@unseen.is - 2016-11-10 03:00 +0100
  Re: DSA-3708-1 mat -- security update (What are MAT users to do)? Andrew Deck <andrew.hastings.deck@gmail.com> - 2016-11-10 03:00 +0100
  Re: DSA-3708-1 mat -- security update (What are MAT users to do)? intrigeri <intrigeri@debian.org> - 2016-11-10 09:10 +0100
  Re: DSA-3708-1 mat -- security update (What are MAT users to do)? Robert Haist <rhaist@mailbox.org> - 2016-11-13 12:30 +0100
    Re: DSA-3708-1 mat -- security update (What are MAT users to do)? intrigeri <intrigeri@debian.org> - 2016-11-13 13:50 +0100
      Re: DSA-3708-1 mat -- security update (What are MAT users to do)? Stephen Dowdy <sdowdy@ucar.edu> - 2016-11-13 17:30 +0100

csiph-web