Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sbc for openSUSE:Factory checked in at 2026-10-12 22:05:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sbc (Old) and /work/SRC/openSUSE:Factory/.sbc.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sbc" Mon Oct 12 22:05:16 2026 rev:13 rq:1384152 version:2.2 Changes: -------- --- /work/SRC/openSUSE:Factory/sbc/sbc.changes 2026-03-27 06:49:57.071068258 +0100 +++ /work/SRC/openSUSE:Factory/.sbc.new.3698736/sbc.changes 2026-10-12 22:05:29.334985877 +0200 @@ -1,0 +2,6 @@ +Fri Oct 9 14:21:03 UTC 2026 - Torsten Duwe <[email protected]> + +- Add Fix-offby1-sbc_unpack_frame_internal.patch + (CVE-2026-16473 bsc#1272367) + +------------------------------------------------------------------- New: ---- Fix-offby1-sbc_unpack_frame_internal.patch ----------(New B)---------- New: - Add Fix-offby1-sbc_unpack_frame_internal.patch (CVE-2026-16473 bsc#1272367) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sbc.spec ++++++ --- /var/tmp/diff_new_pack.QYHdLW/_old 2026-10-12 22:05:30.195021156 +0200 +++ /var/tmp/diff_new_pack.QYHdLW/_new 2026-10-12 22:05:30.196021197 +0200 @@ -28,6 +28,7 @@ URL: https://www.kernel.org/pub/linux/bluetooth Source: https://www.kernel.org/pub/linux/bluetooth/%{name}-%{version}.tar.xz Source1: baselibs.conf +Patch1: Fix-offby1-sbc_unpack_frame_internal.patch BuildRequires: pkgconfig BuildRequires: pkgconfig(sndfile) ++++++ Fix-offby1-sbc_unpack_frame_internal.patch ++++++ References: CVE-2026-16473 bsc#1272367 diff --git a/sbc/sbc.c b/sbc/sbc.c index 2fab366..ffe281a 100644 --- a/sbc/sbc.c +++ b/sbc/sbc.c @@ -483,7 +483,7 @@ static int sbc_unpack_frame_internal(const uint8_t *data, audio_sample = 0; for (bit = 0; bit < bits[ch][sb]; bit++) { - if (consumed > len * 8) + if (consumed >= len * 8) return -1; if ((data[consumed >> 3] >> (7 - (consumed & 0x7))) & 0x01)
