Opened 7 months ago

Closed 7 months ago

#22836 closed enhancement (fixed)

Backport several security fixes to localsearch

Reported by: Douglas R. Reno Owned by: Douglas R. Reno
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

While reviewing the GNOME Security Wiki, I noticed a few security fixes for localsearch that we will want to backport.

  • (CVE-2026-1767) Heap Buffer Overflow in GNOME localsearch MP3 Extractor
  • (CVE-2026-1766) Heap Buffer Overflow in GNOME localsearch MP3 Extractor (ID3v2.3 COMM Tags)
  • (CVE-2026-1765) Heap Buffer Overflow in GNOME localsearch MP3 Extractor (TXXX Tags)
  • (CVE-2026-1764) Heap Buffer Overflow in GNOME localsearch MP3 Extractor

Change History (3)

comment:1 by Douglas R. Reno, 7 months ago

Priority: normal → elevated

comment:2 by Douglas R. Reno, 7 months ago

Owner: changed from blfs-book to Douglas R. Reno
Status: new → assigned

comment:3 by Douglas R. Reno, 7 months ago

Resolution: → fixed
Status: assigned → closed

Fixed at 47bffe80ec5f5fd361b703b8caa3ac8924ac1971

SA-12.4-107 issued

Note: See TracTickets for help on using tickets.