Debian DSA-3708-1 : mat - security update

high Nessus Plugin ID 94644

Synopsis

The remote Debian host is missing a security-related update.

Description

Hartmut Goebel discovered that MAT, a toolkit to anonymise/remove metadata from files did not remove metadata from images embededed in PDF documents.

Solution

Upgrade the mat packages.

For the stable distribution (jessie), this problem has been fixed in version 0.5.2-3+deb8u1. This update disables PDF support in MAT entirely.

See Also

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=826101

https://packages.debian.org/source/jessie/mat

https://www.debian.org/security/2016/dsa-3708

Plugin Details

Severity: High

ID: 94644

File Name: debian_DSA-3708.nasl

Version: 2.4

Type: local

Agent: unix

Published: 11/9/2016

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:mat, cpe:/o:debian:debian_linux:8.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 11/7/2016

Reference Information

DSA: 3708