Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libsndfile for openSUSE:Factory checked in at 2026-11-08 19:21:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libsndfile (Old) and /work/SRC/openSUSE:Factory/.libsndfile.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libsndfile" Sun Nov 8 19:21:19 2026 rev:72 rq:1395837 version:1.2.2 Changes: -------- --- /work/SRC/openSUSE:Factory/libsndfile/libsndfile-progs.changes 2026-10-23 20:21:37.554820876 +0200 +++ /work/SRC/openSUSE:Factory/.libsndfile.new.3759290/libsndfile-progs.changes 2026-11-08 19:21:27.185558828 +0100 @@ -1,0 +2,7 @@ +Fri Nov 6 09:41:59 UTC 2026 - Takashi Iwai <[email protected]> + +- Fix information disclosure via uninitialized variable use in WAV + parsing (CVE-2026-109828, bsc#1285421): + libsndfile-CVE-2026-109828.patch + +------------------------------------------------------------------- libsndfile.changes: same change New: ---- libsndfile-CVE-2026-109828.patch ----------(New B)---------- New:/work/SRC/openSUSE:Factory/.libsndfile.new.3759290/libsndfile-progs.changes- parsing (CVE-2026-109828, bsc#1285421): /work/SRC/openSUSE:Factory/.libsndfile.new.3759290/libsndfile-progs.changes: libsndfile-CVE-2026-109828.patch /work/SRC/openSUSE:Factory/.libsndfile.new.3759290/libsndfile-progs.changes- -- /work/SRC/openSUSE:Factory/.libsndfile.new.3759290/libsndfile.changes- parsing (CVE-2026-109828, bsc#1285421): /work/SRC/openSUSE:Factory/.libsndfile.new.3759290/libsndfile.changes: libsndfile-CVE-2026-109828.patch /work/SRC/openSUSE:Factory/.libsndfile.new.3759290/libsndfile.changes- ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libsndfile-progs.spec ++++++ --- /var/tmp/diff_new_pack.3CUzjh/_old 2026-11-08 19:21:28.196600653 +0100 +++ /var/tmp/diff_new_pack.3CUzjh/_new 2026-11-08 19:21:28.199600777 +0100 @@ -32,6 +32,7 @@ Patch4: sndfile-convert-CVE-2025-56226.patch Patch10: libsndfile-CVE-2022-33065-2.patch Patch11: libsndfile-CVE-2026-88386.patch +Patch13: libsndfile-CVE-2026-109828.patch # not merged yet to the upstream Patch5: libsndfile-CVE-2025-52194.patch Patch6: libsndfile-CVE-2026-37555.patch ++++++ libsndfile.spec ++++++ --- /var/tmp/diff_new_pack.3CUzjh/_old 2026-11-08 19:21:28.237602349 +0100 +++ /var/tmp/diff_new_pack.3CUzjh/_new 2026-11-08 19:21:28.239602432 +0100 @@ -34,6 +34,7 @@ Patch4: sndfile-convert-CVE-2025-56226.patch Patch10: libsndfile-CVE-2022-33065-2.patch Patch11: libsndfile-CVE-2026-88386.patch +Patch13: libsndfile-CVE-2026-109828.patch # not merged yet to the upstream Patch5: libsndfile-CVE-2025-52194.patch Patch6: libsndfile-CVE-2026-37555.patch ++++++ libsndfile-CVE-2026-109828.patch ++++++ >From eca053a85717a45034206d5896faba35d365b5c1 Mon Sep 17 00:00:00 2001 From: Ilias Aberkane <user.name> Date: Fri, 25 Sep 2026 13:38:54 +0200 Subject: [PATCH] wavlike: copy only the labl bytes actually read into cue names --- src/wavlike.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/src/wavlike.c +++ b/src/wavlike.c @@ -1066,7 +1066,7 @@ wavlike_subchunk_parse (SF_PRIVATE *psf, i++ ; if (i < psf->cues->cue_count) - memcpy (psf->cues->cue_points [i].name, buffer, sizeof (psf->cues->cue_points [i].name)) ; + psf_strlcpy (psf->cues->cue_points [i].name, sizeof (psf->cues->cue_points [i].name), buffer) ; } ; } ; break ;
