SUSE-SU-2026:21854-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-202621854-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:21854-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:21854-1
Upstream
CVE (4)
  • CVE-2026-1764
  • CVE-2026-1765
  • CVE-2026-1766
  • CVE-2026-1767
Related
CVE (4)
  • CVE-2026-1764
  • CVE-2026-1765
  • CVE-2026-1766
  • CVE-2026-1767
Published
2026-05-27T16:46:46Z
Modified
2026-06-02T18:24:30Z
Summary
Security update for localsearch
Details

This update for localsearch fixes the following issues:

  • CVE-2026-1764: Fixed a heap buffer overflow leads to denial of service or information disclosure when parsing MP3 files. (bsc#1257606)
  • CVE-2026-1765: Fixed a Denial of Service and potential information disclosure via crafted MP3 files. (bsc#1257607)
  • CVE-2026-1766: Fixed a Denial of Service and information disclosure via malformed MP3 files. (bsc#1257608)
  • CVE-2026-1767: Fixed a heap buffer overflow leading to denial of service or information disclosure via malformed MP3 ID3 tags. (bsc#1257609)
References

Affected packages