Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 43 SDL2_sound Important CVE-2025-14369 DoS Advisory 2026-6ea6f0a56b

fedora
Calendar Grey March 14, 2026
Dist Fedora Esm H88
Fix for CVE-2025-14369 in SDL2_sound for Fedora 43 resolving Denial of Service risk. Update now!
Latest upstream snapshot from stable-2.0 branch

Summary

SDL_sound is a library that handles the decoding of several popular sound

file formats, such as .WAV and .OGG. It is meant to make the programmer's

sound playback tasks simpler. The programmer gives SDL_sound a filename,

or feeds it data directly from one of many sources, and then reads the

decoded waveform data back at her leisure. If resource constraints are a

concern, SDL_sound can process sound data in programmer-specified blocks.

Alternately, SDL_sound can decode a whole sound file and hand back a

single pointer to the whole waveform. SDL_sound can also handle sample

rate, audio format, and channel conversion on-the-fly and

behind-the-scenes, if the programmer desires.

Update Information:

Latest upstream snapshot from stable-2.0 branch. Fixes CVE-2025-14369 in bundled dr_flac.

Topics%20covered

Topics Covered

security advisory denial of service fedora important SDL2_sound cve-2025-14369

Change Log

* Thu Mar 5 2026 Dominik Mierzejewski - 2.0.5^20260117git1be041b-1 - update to 20260117 snapshot from stable-2.0 branch - fixes CVE-2025-14369 (resolves rhbz#2431177) - fixes rpmbuild -bi --short-circuit * Fri Jan 16 2026 Fedora Release Engineering - 2.0.4-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 2.0.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2431177 - CVE-2025-14369 SDL2_sound: dr_flac: Denial of Service via integer overflow in FLAC metadata [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2431177

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6ea6f0a56b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: SDL2_sound
Product: Fedora 43
Version: 2.0.5^20260117git1be041b
Release: 1.fc43
URL: http://www.icculus.org/SDL_sound
Summary: An abstract soundfile decoder library

Topics%20covered

Topics Covered

security advisory denial of service fedora important SDL2_sound cve-2025-14369

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here