Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package praat for openSUSE:Factory checked in at 2026-10-18 19:24:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/praat (Old) and /work/SRC/openSUSE:Factory/.praat.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "praat" Sun Oct 18 19:24:58 2026 rev:75 rq:1385739 version:7.0.02 Changes: -------- --- /work/SRC/openSUSE:Factory/praat/praat.changes 2026-09-07 11:32:20.928346582 +0200 +++ /work/SRC/openSUSE:Factory/.praat.new.3698736/praat.changes 2026-10-18 19:25:17.530706029 +0200 @@ -1,0 +2,8 @@ +Sun Oct 18 05:08:39 UTC 2026 - Atri Bhattacharya <[email protected]> + +- CVE-2026-110698: praat: improper n_dims argument validation in + whisper model loader can cause heap out-of-bounds write + (bsc#1285761) + * praat-improper-n_dims-argument-validation.patch + +------------------------------------------------------------------- New: ---- praat-improper-n_dims-argument-validation.patch ----------(New B)---------- New: (bsc#1285761) * praat-improper-n_dims-argument-validation.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ praat.spec ++++++ --- /var/tmp/diff_new_pack.YUn1E0/_old 2026-10-18 19:25:19.069770057 +0200 +++ /var/tmp/diff_new_pack.YUn1E0/_new 2026-10-18 19:25:19.070770099 +0200 @@ -29,6 +29,8 @@ Patch1: praat-use_system_libs.patch # PATCH-FIX-OPENSUSE praat-no-return-in-nonvoid.patch -- make the compiler happy Patch2: praat-no-return-in-nonvoid.patch +# PATCH-FIX-UPSTREAM praat-improper-n_dims-argument-validation.patch bsc#1285761 [email protected] -- CVE-2026-110698: praat: improper n_dims argument validation in whisper model loader can cause heap out-of-bounds write +Patch3: https://github.com/praat/praat.github.io/commit/a910d21a2705ef4cd16d91f29cdc8da1ab1a7221.patch#/praat-improper-n_dims-argument-validation.patch BuildRequires: gcc-c++ BuildRequires: glpk-devel BuildRequires: hicolor-icon-theme ++++++ praat-improper-n_dims-argument-validation.patch ++++++ >From a910d21a2705ef4cd16d91f29cdc8da1ab1a7221 Mon Sep 17 00:00:00 2001 From: PaulBoersma <[email protected]> Date: Tue, 13 Oct 2026 11:18:38 +0200 Subject: [PATCH] quick fix for issue #3348 (should update whisper.cpp instead) --- external/whispercpp/whisper.cpp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/external/whispercpp/whisper.cpp b/external/whispercpp/whisper.cpp index 9acb4fc9c..76646b0cf 100644 --- a/external/whispercpp/whisper.cpp +++ b/external/whispercpp/whisper.cpp @@ -1872,6 +1872,10 @@ static bool whisper_model_load(struct whisper_model_loader * loader, whisper_con int32_t ttype; read_safe(loader, n_dims); + if (n_dims < 0 || n_dims > 4) { // quick fix for issue #3348 (real fix is to update whisper.cpp) + WHISPER_LOG_ERROR("%s: invalid number of dimensions (should be between 0 and 4): %d\n", __func__, n_dims); + return false; + } read_safe(loader, length); read_safe(loader, ttype);
