Summary
Fatih Çelik discovered that tracker-miners incorrectly handled certain
malformed MP3 files. An attacker could use this issue to cause
tracker-miners to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | tracker-miners | 3.3.3-0ubuntu0.20.04.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | tracker-miners | 3.7.1-1ubuntu0.1 |
| Ubuntu · 25.10 | tracker-miners | 3.8.2-4ubuntu2.1 |