diff --git a/libsndfile-1.0.31-ced91d7b.patch b/libsndfile-1.0.31-ced91d7b.patch
new file mode 100644
index 0000000..c39c029
--- /dev/null
+++ b/libsndfile-1.0.31-ced91d7b.patch
@@ -0,0 +1,25 @@
+From ced91d7b971be6173b604154c39279ce90ad87cc Mon Sep 17 00:00:00 2001
+From: yuan <ssspeed00@gmail.com>
+Date: Tue, 20 Apr 2021 16:16:32 +0800
+Subject: [PATCH] flac: Fix improper buffer reusing (#732)
+
+---
+ src/flac.c | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/src/flac.c b/src/flac.c
+index 64d0172e6..e33204505 100644
+--- a/src/flac.c
++++ b/src/flac.c
+@@ -948,7 +948,11 @@ flac_read_loop (SF_PRIVATE *psf, unsigned len)
+ 	/* Decode some more. */
+ 	while (pflac->pos < pflac->len)
+ 	{	if (FLAC__stream_decoder_process_single (pflac->fsd) == 0)
++		{	psf_log_printf (psf, "FLAC__stream_decoder_process_single returned false\n") ;
++			/* Current frame is busted, so NULL the pointer. */
++			pflac->frame = NULL ;
+ 			break ;
++			} ;
+ 		state = FLAC__stream_decoder_get_state (pflac->fsd) ;
+ 		if (state >= FLAC__STREAM_DECODER_END_OF_STREAM)
+ 		{	psf_log_printf (psf, "FLAC__stream_decoder_get_state returned %s\n", FLAC__StreamDecoderStateString [state]) ;
diff --git a/libsndfile.spec b/libsndfile.spec
index 5e5cb30..4739841 100644
--- a/libsndfile.spec
+++ b/libsndfile.spec
@@ -1,7 +1,7 @@
 Summary:	Library for reading and writing sound files
 Name:		libsndfile
 Version:	1.0.31
-Release:	5%{?dist}%{?dist}
+Release:	6%{?dist}
 License:	LGPLv2+ and GPLv2+ and BSD
 URL:		http://libsndfile.github.io/libsndfile/
 Source0:        https://github.com/libsndfile/libsndfile/releases/download/%{version}/libsndfile-%{version}.tar.bz2
@@ -9,6 +9,8 @@ Patch0:		libsndfile-1.0.25-system-gsm.patch
 Patch1:		libsndfile-1.0.25-zerodivfix.patch
 # from upstream, fix #1984320=CVE-2021-3246, for <= 1.0.31
 Patch2:		libsndfile-1.0.31-deb669ee.patch
+# from upstream, fix #2027692, for <= 1.0.31
+Patch3:		libsndfile-1.0.31-ced91d7b.patch
 BuildRequires:  gcc-c++
 BuildRequires:	alsa-lib-devel
 BuildRequires:	flac-devel
@@ -61,6 +63,7 @@ rm -r src/GSM610
 # TODO: check if this patch is still needed
 %patch1 -p1 -b .zerodivfix
 %patch2 -p1 -b .deb669ee
+%patch3 -p1 -b .ced91d7b
 
 %build
 autoreconf -I M4 -fiv # for system-gsm patch
@@ -152,6 +155,9 @@ LD_LIBRARY_PATH=$PWD/src/.libs make check
 
 
 %changelog
+* Wed Dec 01 2021 Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
+- fix heap buffer overflow in flac (#2027692)
+
 * Fri Jul 23 2021 Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-5
 - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution (#1984320)