https://bugs.kde.org/show_bug.cgi?id=441121
--- Comment #4 from Jan Rathmann <jan.rathm...@gmx.de> --- I have tracked this down to the following change in CVE-2021-37620-3.patch (Ubuntu src package exiv2-0.27.3-3ubuntu1.5): =================================================================== --- exiv2-0.27.3.orig/src/tags_int.cpp +++ exiv2-0.27.3/src/tags_int.cpp @@ -2865,7 +2865,7 @@ namespace Exiv2 { } std::string stringValue = value.toString(); - if (stringValue[19] == 'Z') { + if (stringValue.at(19) == 'Z') { stringValue = stringValue.substr(0, 19); } for (size_t i = 0; i < stringValue.length(); ++i) { -- You are receiving this mail because: You are watching all bug changes.