SUSE-SU-2026:1968-1

Details

Description of the patch:

This update for libsndfile fixes the following issues

CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM audio files (bsc#1248458).
CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).

Affected Packages

libsndfile-devel

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

1.0.28-150000.5.23.1

libsndfile1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP7

Fixed in:

1.0.28-150000.5.23.1

libsndfile1-32bit

SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

1.0.28-150000.5.23.1

References

ADVISORY

https://bugzilla.suse.com/1248458

ADVISORY

https://bugzilla.suse.com/1263695

ADVISORY