An update for taglib is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-1638 Final 1.0 1.0 2025-06-13 Initial 2025-06-13 2025-06-13 openEuler SA Tool V1.0 2025-06-13 taglib security update An update for taglib is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1 TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack TrueAudio, WAV, AIFF, MP4 and ASF files. Security Fix(es): TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk.(CVE-2023-47466) An update for taglib is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS,openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Low taglib https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1638 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-47466 https://nvd.nist.gov/vuln/detail/CVE-2023-47466 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 taglib-1.11.1-13.oe2003sp4.aarch64.rpm taglib-debuginfo-1.11.1-13.oe2003sp4.aarch64.rpm taglib-debugsource-1.11.1-13.oe2003sp4.aarch64.rpm taglib-devel-1.11.1-13.oe2003sp4.aarch64.rpm taglib-1.11.1-13.oe2203sp3.aarch64.rpm taglib-debuginfo-1.11.1-13.oe2203sp3.aarch64.rpm taglib-debugsource-1.11.1-13.oe2203sp3.aarch64.rpm taglib-devel-1.11.1-13.oe2203sp3.aarch64.rpm taglib-1.11.1-13.oe2203sp4.aarch64.rpm taglib-debuginfo-1.11.1-13.oe2203sp4.aarch64.rpm taglib-debugsource-1.11.1-13.oe2203sp4.aarch64.rpm taglib-devel-1.11.1-13.oe2203sp4.aarch64.rpm taglib-1.13.1-2.oe2403.aarch64.rpm taglib-debuginfo-1.13.1-2.oe2403.aarch64.rpm taglib-debugsource-1.13.1-2.oe2403.aarch64.rpm taglib-devel-1.13.1-2.oe2403.aarch64.rpm taglib-1.13.1-2.oe2403sp1.aarch64.rpm taglib-debuginfo-1.13.1-2.oe2403sp1.aarch64.rpm taglib-debugsource-1.13.1-2.oe2403sp1.aarch64.rpm taglib-devel-1.13.1-2.oe2403sp1.aarch64.rpm taglib-1.11.1-13.oe2003sp4.src.rpm taglib-1.11.1-13.oe2203sp3.src.rpm taglib-1.11.1-13.oe2203sp4.src.rpm taglib-1.13.1-2.oe2403.src.rpm taglib-1.13.1-2.oe2403sp1.src.rpm taglib-1.11.1-13.oe2003sp4.x86_64.rpm taglib-debuginfo-1.11.1-13.oe2003sp4.x86_64.rpm taglib-debugsource-1.11.1-13.oe2003sp4.x86_64.rpm taglib-devel-1.11.1-13.oe2003sp4.x86_64.rpm taglib-1.11.1-13.oe2203sp3.x86_64.rpm taglib-debuginfo-1.11.1-13.oe2203sp3.x86_64.rpm taglib-debugsource-1.11.1-13.oe2203sp3.x86_64.rpm taglib-devel-1.11.1-13.oe2203sp3.x86_64.rpm taglib-1.11.1-13.oe2203sp4.x86_64.rpm taglib-debuginfo-1.11.1-13.oe2203sp4.x86_64.rpm taglib-debugsource-1.11.1-13.oe2203sp4.x86_64.rpm taglib-devel-1.11.1-13.oe2203sp4.x86_64.rpm taglib-1.13.1-2.oe2403.x86_64.rpm taglib-debuginfo-1.13.1-2.oe2403.x86_64.rpm taglib-debugsource-1.13.1-2.oe2403.x86_64.rpm taglib-devel-1.13.1-2.oe2403.x86_64.rpm taglib-1.13.1-2.oe2403sp1.x86_64.rpm taglib-debuginfo-1.13.1-2.oe2403sp1.x86_64.rpm taglib-debugsource-1.13.1-2.oe2403sp1.x86_64.rpm taglib-devel-1.13.1-2.oe2403sp1.x86_64.rpm taglib-help-1.11.1-13.oe2003sp4.noarch.rpm taglib-help-1.11.1-13.oe2203sp3.noarch.rpm taglib-help-1.11.1-13.oe2203sp4.noarch.rpm taglib-help-1.13.1-2.oe2403.noarch.rpm taglib-help-1.13.1-2.oe2403sp1.noarch.rpm TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. 2025-06-13 CVE-2023-47466 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP1 Low 2.5 AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L taglib security update 2025-06-13 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1638