Fix CVE-2021-22204:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22204

Patch extracted from commit cf0f4e7dcd024ca99615bfd1102a841a25dde031
from upstream source repository:

https://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800

diff --git a/lib/Image/ExifTool/DjVu.pm b/lib/Image/ExifTool/DjVu.pm
index c284d10..03b3f9f 100644
--- a/lib/Image/ExifTool/DjVu.pm
+++ b/lib/Image/ExifTool/DjVu.pm
@@ -18,7 +18,7 @@ use strict;
 use vars qw($VERSION);
 use Image::ExifTool qw(:DataAccess :Utils);
 
-$VERSION = '1.06';
+$VERSION = '1.07';
 
 sub ParseAnt($);
 sub ProcessAnt($$$);
@@ -227,10 +227,11 @@ Tok: for (;;) {
                 last unless $tok =~ /(\\+)$/ and length($1) & 0x01;
                 $tok .= '"';    # quote is part of the string
             }
-            # must protect unescaped "$" and "@" symbols, and "\" at end of string
-            $tok =~ s{\\(.)|([\$\@]|\\$)}{'\\'.($2 || $1)}sge;
-            # convert C escape sequences (allowed in quoted text)
-            $tok = eval qq{"$tok"};
+            # convert C escape sequences, allowed in quoted text
+            # (note: this only converts a few of them!)
+            my %esc = ( a => "\a", b => "\b", f => "\f", n => "\n",
+                        r => "\r", t => "\t", '"' => '"', '\\' => '\\' );
+            $tok =~ s/\\(.)/$esc{$1}||'\\'.$1/egs;
         } else {                # key name
             pos($$dataPt) = pos($$dataPt) - 1;
             # allow anything in key but whitespace, braces and double quotes
74e7b1971c9795ab6365b8e80e5140ceba9e5'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=58974e7b1971c9795ab6365b8e80e5140ceba9e5'>root</a>/<a href='/guix/log/gnu?id=58974e7b1971c9795ab6365b8e80e5140ceba9e5'>gnu</a>/<a href='/guix/log/gnu/packages?id=58974e7b1971c9795ab6365b8e80e5140ceba9e5'>packages</a>/<a href='/guix/log/gnu/packages/rdf.scm?id=58974e7b1971c9795ab6365b8e80e5140ceba9e5'>rdf.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/rdf.scm?id=58974e7b1971c9795ab6365b8e80e5140ceba9e5&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2022-05-31 14:53:31 -0400'>2022-05-31</span></td><td><a href='/guix/commit/gnu/packages/rdf.scm?id=0dbeb5d2f9676e48cc3a167406192cf0e52efc6f'>gnu: Remove python2-rdflib.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/rdf.scm (python2-rdflib): Delete variable.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2022-05-31 14:52:33 -0400'>2022-05-31</span></td><td><a href='/guix/commit/gnu/packages/rdf.scm?id=0999af5b42540f2d5f4b52c65a7e350f071d2f3c'>gnu: Add python-pyrdfa3.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/rdf.scm (python-pyrdfa3): New variable.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2022-05-12 12:45:56 -0400'>2022-05-12</span></td><td><a href='/guix/commit/gnu/packages/rdf.scm?id=2c30237809f975dbdf40d503fc9604de0013b870'>gnu: python-sparqlwrapper: Update to 2.0.0.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/rdf.scm (python-sparqlwrapper): Update to 2.0.0.
[source]: Adjust Git URI.
</span></span></td><td>Maxim Cournoyer</td></tr>