[CLSA-2026:1791301913] Fix CVE(s): CVE-2023-47466
Type:
security
Severity:
Important
Release date:
2026-10-06 15:52:03 UTC
Description:
* SECURITY UPDATE: crash when writing tags to a crafted WAV file - debian/patches/CVE-2023-47466.patch: return early on an empty chunk list in RIFF::File::updateGlobalSize() (taglib/riff/rifffile.cpp) - CVE-2023-47466
CVEs fixed:
Updated packages:
  • libtag1-dev_1.11.1+dfsg.1-0.2build2+tuxcare.els1_amd64.deb
    sha:ec643bf70bfed8c334de7ab73f4c3c4e3a28805f
  • libtag1-doc_1.11.1+dfsg.1-0.2build2+tuxcare.els1_all.deb
    sha:3d6f0ec247afdd960b8446109ee12d1ed2abecdd
  • libtag1v5_1.11.1+dfsg.1-0.2build2+tuxcare.els1_amd64.deb
    sha:9f44aedaec623fe0d68ce2f9996f167576003778
  • libtag1v5-vanilla_1.11.1+dfsg.1-0.2build2+tuxcare.els1_amd64.deb
    sha:33a728f1a6d02ae4f017d8ecd47bf86678a67518
  • libtagc0_1.11.1+dfsg.1-0.2build2+tuxcare.els1_amd64.deb
    sha:468548c1c5a5183527c50aeabfb106f2a7bc67d4
  • libtagc0-dev_1.11.1+dfsg.1-0.2build2+tuxcare.els1_amd64.deb
    sha:1185db695d8a4129784a1dbc395749cc1e32701e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.