A flaw was found in Exiv2 0.26. The samples/geotag.cpp in the example code misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow. References: https://github.com/Exiv2/exiv2/issues/382
Created exiv2 tracking bugs for this issue: Affects: fedora-all [bug 1609397]
We don't ship this. Additionally, this is should not be a problem for us, as we use glibc and realpath() should allocate the buffer there.
Statement: This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and 7.
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2020:1577 https://access.redhat.com/errata/RHSA-2020:1577