Control: severity -1 serious According to the upstream libexiv2 maintainer, gthumb uses some internal libexiv2 function, which means that an update of libexiv2 can break it at any time, potentially introducing security issues.
Note that a change of behavior could have already been seen with the upgrade of libexiv2-27 to 0.27.3 with the appearance of spurious data before the comment. The correct way to get the comment is std::string comment = Exiv2::CommentValue(value().toString()).comment()); -- Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
