On 2021-12-26 21:00:13 +0000, Sergio Gelato wrote: > My only interest in this bug is that it has kept nomacs out of > bullseye; I don't need its EXIF support.
EXIF information is very useful in general, but AFAIK, only the comment is affected. A solution would be to either fix the comment handling or remove it. (Nowadays, ImageDescription seems to be preferred to Comment, so that removing Comment support would not be a big loss.) > If this package isn't effectively orphaned, perhaps the maintainer > can lower the bug's severity? Note that there is a potential security issue. Perhaps not currently (I'm not sure), but potentially in the future: it suffices that the exiv internals change (like in the past to fix a security bug) to make Nomacs behave erratically, possibly with memory corruption. > (And/or forward the report upstream...) FYI, I haven't reported the bug upstream because Debian has a very old version. The package should be upgraded to 3.16 first. -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)