[SECURITY] [DLA 4450-1] taglib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4450-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2026 https://wiki.debian.org/LTS -...

Azure Linux 3.0 Security Update: libid3tag (CVE-2004-2779)

The version of libid3tag installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2004-2779 advisory. - id3utf16deserialize in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an...

MiracleLinux 8 : exempi-2.4.5-4.el8 (AXSA:2024-8237:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8237:01 advisory. exempi: denial of service via opening of crafted audio file with ID3V2 frame CVE-2020-18651 exempi: denial of service via opening of crafted webp fi...

PT-2026-6841

Name of the Vulnerable Software and Affected Versions tracker-miners affected versions not specified Description A flaw exists in tracker-miners related to the handling of malformed MP3 files. Specifically, the software incorrectly processes certain MP3 files, potentially leading to a denial of...

EUVD-2017-4334

Malware in sbrugna...

EUVD-2018-21031

Malware in sbrugna...

EUVD-2017-16591

Malware in sbrugna...

EUVD-2008-3553

Malware in sbrugna...

EUVD-2009-3783

Malware in sbrugna...

EUVD-2017-4717

Malware in sbrugna...

EUVD-2018-15448

Malware in sbrugna...

EUVD-2009-4632

Malware in sbrugna...

EUVD-2009-1939

Malware in sbrugna...

EUVD-2008-5223

Malware in sbrugna...

EUVD-2021-21744

Malware in sbrugna...

EUVD-2006-3321

Malware in sbrugna...

Unity Linux 20.1050e / 20.1070e Security Update: taglib (UTSA-2025-984685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984685 advisory. TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...

EUVD-2025-12192

Malicious code in bioql PyPI...

Low: taglib

Issue Overview: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. CVE-2023-47466 Affected Packages: taglib Issue Correction: Run dnf update taglib --releasever 2023.8.20250908 or dnf...

Linux Distros Unpatched Vulnerability : CVE-2023-47466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk...