Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat libsndfile Library Security Risk: Data Exposure

published 4 months ago

Summary

The libsndfile library in Red Hat systems is being updated to fix a security issue that could allow attackers to access sensitive data. This update is recommended for all users to protect their systems from potential data exposure.

What to do

Update redhat libsndfile to version 0:1.2.2-5.el10_0.1.
Update redhat libsndfile-debuginfo to version 0:1.2.2-5.el10_0.1.
Update redhat libsndfile-debugsource to version 0:1.2.2-5.el10_0.1.
Update redhat libsndfile-utils to version 0:1.2.2-5.el10_0.1.
Update redhat libsndfile-utils-debuginfo to version 0:1.2.2-5.el10_0.1.
Update redhat libsndfile-devel to version 0:1.2.2-5.el10_0.1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux_eus:10.0	redhat	libsndfile	< 0:1.2.2-5.el10_0.1 Fix: upgrade to 0:1.2.2-5.el10_0.1
Red Hat:enterprise_linux_eus:10.0	redhat	libsndfile-debuginfo	< 0:1.2.2-5.el10_0.1 Fix: upgrade to 0:1.2.2-5.el10_0.1
Red Hat:enterprise_linux_eus:10.0	redhat	libsndfile-debugsource	< 0:1.2.2-5.el10_0.1 Fix: upgrade to 0:1.2.2-5.el10_0.1
Red Hat:enterprise_linux_eus:10.0	redhat	libsndfile-utils	< 0:1.2.2-5.el10_0.1 Fix: upgrade to 0:1.2.2-5.el10_0.1
Red Hat:enterprise_linux_eus:10.0	redhat	libsndfile-utils-debuginfo	< 0:1.2.2-5.el10_0.1 Fix: upgrade to 0:1.2.2-5.el10_0.1
Red Hat:enterprise_linux_eus:10.0	redhat	libsndfile-devel	< 0:1.2.2-5.el10_0.1 Fix: upgrade to 0:1.2.2-5.el10_0.1

Original advisory text

Red Hat Security Advisory: libsndfile security update

References

https://access.redhat.com/errata/RHSA-2026:25092 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2463856 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25092.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-37555 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-37555 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-37555 Vendor Advisory
https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e... Third Party Advisory
https://github.com/libsndfile/libsndfile/issues/833 Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

8.2 High

Timeline

Published11 Jun 2026

Updated27 Jun 2026

First seen27 Jun 2026

Sources

RHSA-2026:25092 · OSV

Track software like this

Free during beta