Red Hat Product Errata RHSA-2026:25092 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25092 - Security Advisory Overview Updated Packages Synopsis Important: libsndfile security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libsndfile is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2463856 - CVE-2026-37555 libsndfile: integer overflow in ima_reader_init() CVEs CVE-2026-37555 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM libsndfile-1.2.2-5.el10_0.1.src.rpm SHA-256: 37f27fd285deb0bd77ef575e13c3bfdae18360a7bbbc4155c7e00ec6dd7ea531 x86_64 libsndfile-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: 9981930ef069167c5f8e15a15795466196e8049ddd3234aaa5e1a54ab8b6ca2f libsndfile-debuginfo-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: e8217cd79fec0747a7b867eb882d7de5d22f3a6af55417a05c14c1604f21b78b libsndfile-debugsource-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: 5f1743fb5479b16b040bc33a7b120aeb34531e3ffb1ca102de1c09e2fe004f9e libsndfile-utils-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: 0daa14fa0a166ef41001e4915c7175bf8201d1960d66883047b01fffcfe6dd47 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: 207cdd8aa7dbb34c095a54be88e9593921efdb669cdaa114a884d69ae02683da Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM libsndfile-1.2.2-5.el10_0.1.src.rpm SHA-256: 37f27fd285deb0bd77ef575e13c3bfdae18360a7bbbc4155c7e00ec6dd7ea531 s390x libsndfile-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 43084113054ce8e50748c16e5f5134a54cd443302b104b327c90a3276bb26dcc libsndfile-debuginfo-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 11b6709a9f7eca6744217e98cdc3de5534b2b9a54f09566e28c68c6239ad3d17 libsndfile-debugsource-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 8b3af8ad3cf3daf4c27597c3064e8d7ea64937ea03316dfb6ba34dbd3726e781 libsndfile-utils-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 23da21243f8edfc040617ad465b9d95d60b14e6f6099951b59d1d6e9ac5309e8 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.s390x.rpm SHA-256: a4c68f72bcabdfe40980fc13f14e263ff304acd2c161f331cc1ebfff3b44db99 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM libsndfile-1.2.2-5.el10_0.1.src.rpm SHA-256: 37f27fd285deb0bd77ef575e13c3bfdae18360a7bbbc4155c7e00ec6dd7ea531 ppc64le libsndfile-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: d2ae87620bb2c9e85eb2dd8639bb4957726c2e665d9973c66e53fe6575fdbb32 libsndfile-debuginfo-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: 15da3b4e7f0da34269b982f564b97e5cf00191aa978009634c0a8fc204600849 libsndfile-debugsource-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: 636517322c2363cd0bb6138d05c1dd430d74dfe14635fa731407a5ecfd493d78 libsndfile-utils-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: 705255369d412e054c6bc8805ae76d191a511bfc917a1426fb63a396d0605de0 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: c9208cec547e20707f26f26519e96db5662a8580dd41c09450479e058ea61500 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM libsndfile-1.2.2-5.el10_0.1.src.rpm SHA-256: 37f27fd285deb0bd77ef575e13c3bfdae18360a7bbbc4155c7e00ec6dd7ea531 aarch64 libsndfile-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: abd6ff0ee71ddb7f82e367e019daea073d9cb3ba5e3e772c91cd841ef2dea077 libsndfile-debuginfo-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: 187b4000902eb05ac577c737c3ec74d9788259044ed97f48d1a405cc0e26597c libsndfile-debugsource-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: bcb27e2a0a42f0a4091e7f045f36932240bb00825dd8c9382b6b78baa8590972 libsndfile-utils-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: 219b5c715007fb8baff0a7e505b0a33e4d6dfb91230a569b98bae2957494023b libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: f2c95288d26f7f09840de4c70f4b52c3bc4e4523a5975008a407f57f0e1a555b Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 SRPM x86_64 libsndfile-debuginfo-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: e8217cd79fec0747a7b867eb882d7de5d22f3a6af55417a05c14c1604f21b78b libsndfile-debugsource-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: 5f1743fb5479b16b040bc33a7b120aeb34531e3ffb1ca102de1c09e2fe004f9e libsndfile-devel-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: b695571eb0d156b7e7cf9266319ee07aba4abf4c6b24deba9fac7ba0830f3116 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.x86_64.rpm SHA-256: 207cdd8aa7dbb34c095a54be88e9593921efdb669cdaa114a884d69ae02683da Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 SRPM ppc64le libsndfile-debuginfo-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: 15da3b4e7f0da34269b982f564b97e5cf00191aa978009634c0a8fc204600849 libsndfile-debugsource-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: 636517322c2363cd0bb6138d05c1dd430d74dfe14635fa731407a5ecfd493d78 libsndfile-devel-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: cdf5e0286017b2810b0ca503fe207b1ae58b4a895dbc34930428a20d6b81e459 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: c9208cec547e20707f26f26519e96db5662a8580dd41c09450479e058ea61500 Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 SRPM s390x libsndfile-debuginfo-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 11b6709a9f7eca6744217e98cdc3de5534b2b9a54f09566e28c68c6239ad3d17 libsndfile-debugsource-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 8b3af8ad3cf3daf4c27597c3064e8d7ea64937ea03316dfb6ba34dbd3726e781 libsndfile-devel-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 4f072d7b20c50af9322757b31f6a0504fd172dedb0bc9fc86457bc79a79fa3b7 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.s390x.rpm SHA-256: a4c68f72bcabdfe40980fc13f14e263ff304acd2c161f331cc1ebfff3b44db99 Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 SRPM aarch64 libsndfile-debuginfo-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: 187b4000902eb05ac577c737c3ec74d9788259044ed97f48d1a405cc0e26597c libsndfile-debugsource-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: bcb27e2a0a42f0a4091e7f045f36932240bb00825dd8c9382b6b78baa8590972 libsndfile-devel-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: 19de4396db3fb881e0f7f3918a5b7ec6479caa1ae1e3e7c3863d14ffd62baf00 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: f2c95288d26f7f09840de4c70f4b52c3bc4e4523a5975008a407f57f0e1a555b Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM libsndfile-1.2.2-5.el10_0.1.src.rpm SHA-256: 37f27fd285deb0bd77ef575e13c3bfdae18360a7bbbc4155c7e00ec6dd7ea531 aarch64 libsndfile-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: abd6ff0ee71ddb7f82e367e019daea073d9cb3ba5e3e772c91cd841ef2dea077 libsndfile-debuginfo-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: 187b4000902eb05ac577c737c3ec74d9788259044ed97f48d1a405cc0e26597c libsndfile-debugsource-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: bcb27e2a0a42f0a4091e7f045f36932240bb00825dd8c9382b6b78baa8590972 libsndfile-utils-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: 219b5c715007fb8baff0a7e505b0a33e4d6dfb91230a569b98bae2957494023b libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.aarch64.rpm SHA-256: f2c95288d26f7f09840de4c70f4b52c3bc4e4523a5975008a407f57f0e1a555b Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM libsndfile-1.2.2-5.el10_0.1.src.rpm SHA-256: 37f27fd285deb0bd77ef575e13c3bfdae18360a7bbbc4155c7e00ec6dd7ea531 s390x libsndfile-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 43084113054ce8e50748c16e5f5134a54cd443302b104b327c90a3276bb26dcc libsndfile-debuginfo-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 11b6709a9f7eca6744217e98cdc3de5534b2b9a54f09566e28c68c6239ad3d17 libsndfile-debugsource-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 8b3af8ad3cf3daf4c27597c3064e8d7ea64937ea03316dfb6ba34dbd3726e781 libsndfile-utils-1.2.2-5.el10_0.1.s390x.rpm SHA-256: 23da21243f8edfc040617ad465b9d95d60b14e6f6099951b59d1d6e9ac5309e8 libsndfile-utils-debuginfo-1.2.2-5.el10_0.1.s390x.rpm SHA-256: a4c68f72bcabdfe40980fc13f14e263ff304acd2c161f331cc1ebfff3b44db99 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM libsndfile-1.2.2-5.el10_0.1.src.rpm SHA-256: 37f27fd285deb0bd77ef575e13c3bfdae18360a7bbbc4155c7e00ec6dd7ea531 ppc64le libsndfile-1.2.2-5.el10_0.1.ppc64le.rpm SHA-256: d2ae87620bb2c9e85eb2dd8639b