Bug#1126910: localsearch: CVE-2026-1764 CVE-2026-1765 CVE-2026-1766 CVE-2026-1767

[Salvatore Bonaccorso]

Source: localsearch
Version: 3.8.2-10
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi,

The following vulnerabilities were published for localsearch.

CVE-2026-1764[0]:
| Heap Buffer Overflow in GNOME localsearch MP3 Extractor


CVE-2026-1765[1]:
| Heap Buffer Overflow in GNOME localsearch MP3 Extractor (TXXX Tags)


CVE-2026-1766[2]:
| Heap Buffer Overflow in GNOME localsearch MP3 Extractor (ID3v2.3 COMM Tags)


CVE-2026-1767[3]:
| Heap Buffer Overflow in GNOME localsearch MP3 Extractor


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-1764
    https://www.cve.org/CVERecord?id=CVE-2026-1764
[1] https://security-tracker.debian.org/tracker/CVE-2026-1765
    https://www.cve.org/CVERecord?id=CVE-2026-1765
[2] https://security-tracker.debian.org/tracker/CVE-2026-1766
    https://www.cve.org/CVERecord?id=CVE-2026-1766
[3] https://security-tracker.debian.org/tracker/CVE-2026-1767
    https://www.cve.org/CVERecord?id=CVE-2026-1767

Regards,
Salvatore