Bug#985309: CVE-2021-21235

2021-03-16 Thread kpcyrd 
hi,

the package is likely too old to have this bug, but since this package
is currently not used by anything and not meant to be used by any users,
I'd recommend to remove it from testing (we're eventually going to close
it by uploading the latest version to unstable).

cheers

Bug#985309: CVE-2021-21235

2021-03-15 Thread Moritz Muehlenhoff 
Source: rust-kamadak-exif
Severity: grave
Tags: security
X-Debbugs-Cc: Debian Security Team 

https://github.com/kamadak/exif-rs/security/advisories/GHSA-px9g-8hgv-jvg2

Cheers,
Moritz