I've submitted an update for adplug yesterday for all released branches of
Fedora (and EPEL), because it addresses 8 CVEs.
https://bodhi.fedoraproject.org/updates/?search=adplug-2.3.3
The API is compatible (but ABI bump), so it will just require a rebuild for
dependent packages. Given only two dependent packages in Fedora (and one in
EPEL), I've done the few required rebuilds already.
Regards,
Robert