Ubuntu
gwenview package

  1. Bug #1941752
  2. Comment #4

Comment 4 for bug 1941752

Revision history for this message
Jan Rathmann (kaiserclaudius) wrote :

The following change in CVE-2021-37620-3.patch is responsible:

--- exiv2-0.27.3.orig/src/tags_int.cpp
+++ exiv2-0.27.3/src/tags_int.cpp
@@ -2865,7 +2865,7 @@ namespace Exiv2 {
         }

         std::string stringValue = value.toString();
- if (stringValue[19] == 'Z') {
+ if (stringValue.at(19) == 'Z') {
             stringValue = stringValue.substr(0, 19);
         }
         for (size_t i = 0; i < stringValue.length(); ++i) {