Back Linuxsecurity

Fedora 44 Aqualung Important Music Player Update CVE-2025

Linuxsecurity •LinuxSecurity Advisories • March 19, 2026

Aqualung is an advanced music player originally targeted at the GNU/Linux operating system. It plays audio CDs, internet radio streams and pod casts as well as sound files in just any audio format and has the feature of inserting no gaps between adjacent tracks. Update Information : Latest Monkey's Audio Codec release. Changelog: . Fixes CVE-2025-61043.

Aqualung is an advanced music player originally targeted at the GNU/Linux

operating system. It plays audio CDs, internet radio streams and pod casts as

well as sound files in just any audio format and has the feature of

inserting no gaps between adjacent tracks.

Latest Monkey's Audio Codec release. Changelog: . Fixes CVE-2025-61043.

* Tue Feb 24 2026 Dominik Mierzejewski - 2.0-6 - rebuilt for mac 12.35 * Tue Feb 17 2026 Tom Callaway - 2.0-5 - rebuild for lua 5.5

[ 1 ] Bug #2363650 - mac-12.50 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-62f9125c65' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Update for CVE-2025-61043 in Fedora 44 Music Applications On March 19, 2026, Fedora 44 released essential updates for two music applications, Monkey's Audio and Aqualung, addressing the vulnerability identified as CVE-2025-61043, which was published on October 28, 2025. The updates are crucial for users of these applications on Linux systems, as they fix a significant security flaw that could potentially be exploited. The updates were made available through the 'dnf' package manager, with specific commands provided for installation. Both applications are widely used for audio playback and music compression, making the vulnerability a concern for a broad user base. The updates were issued by Dominik Mierzejewski, indicating ongoing maintenance and support for these applications. Users are strongly advised to apply the updates promptly to mitigate any risks associated with the vulnerability. The changelog for both applications confirms the resolution of the CVE, emphasizing the importance of keeping software up to date. 2 sources 61

Extracted Entities

CVEs (1)

CVE-2025-61043

Platforms (1)

Linux