diff --git a/libsndfile-32/.footprint b/libsndfile-32/.footprint
index 13aaea16..731b4db4 100644
--- a/libsndfile-32/.footprint
+++ b/libsndfile-32/.footprint
@@ -1,9 +1,8 @@
 drwxr-xr-x	root/root	usr/
 drwxr-xr-x	root/root	usr/lib32/
--rw-r--r--	root/root	usr/lib32/libsndfile.a
 -rwxr-xr-x	root/root	usr/lib32/libsndfile.la
-lrwxrwxrwx	root/root	usr/lib32/libsndfile.so -> libsndfile.so.1.0.27
-lrwxrwxrwx	root/root	usr/lib32/libsndfile.so.1 -> libsndfile.so.1.0.27
--rwxr-xr-x	root/root	usr/lib32/libsndfile.so.1.0.27
+lrwxrwxrwx	root/root	usr/lib32/libsndfile.so -> libsndfile.so.1.0.28
+lrwxrwxrwx	root/root	usr/lib32/libsndfile.so.1 -> libsndfile.so.1.0.28
+-rwxr-xr-x	root/root	usr/lib32/libsndfile.so.1.0.28
 drwxr-xr-x	root/root	usr/lib32/pkgconfig/
 -rw-r--r--	root/root	usr/lib32/pkgconfig/sndfile.pc
diff --git a/libsndfile-32/.md5sum b/libsndfile-32/.md5sum
index a3ffa74a..3262ef1e 100644
--- a/libsndfile-32/.md5sum
+++ b/libsndfile-32/.md5sum
@@ -1 +1,5 @@
-fd1d97c6077f03b5d984d7956ffedb7a  libsndfile-1.0.27.tar.gz
+85a957da91be0931bf9d24db80aa4591  0001-FLAC-Fix-a-buffer-read-overrun.patch
+d7e8a433d8444f1933bb754405a41f4e  0002-src-flac.c-Fix-a-buffer-read-overflow.patch
+b115673b05dcdd4b326b2dfb0c85cbcb  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch
+70d26bd4996881764d806ecbf98dd847  0020-src-common.c-Fix-heap-buffer-overflows-when-writing.patch
+646b5f98ce89ac60cdb060fcd398247c  libsndfile-1.0.28.tar.gz
diff --git a/libsndfile-32/.signature b/libsndfile-32/.signature
index ed1cdc3b..896856a3 100644
--- a/libsndfile-32/.signature
+++ b/libsndfile-32/.signature
@@ -1,5 +1,9 @@
 untrusted comment: verify with /etc/ports/compat-32.pub
-RWSwxGo/zH7eXTVq5wyOT+SD/YtteLwGgLJ+ErIBqpRkBZqcj0YzrtjNC+a74JevLoxJE4X4eNE/PDtcIXeGrNdIZ/CZklzACQg=
-SHA256 (Pkgfile) = 9ba2003177983c8df5ed01f9c3f41b29c9e1ac26ad1d10594cf0f27ca29325e8
-SHA256 (.footprint) = 97afec8b6b0843718e206500475cdec6460b50cf4413b6fc11c2dee5d64a95fb
-SHA256 (libsndfile-1.0.27.tar.gz) = a391952f27f4a92ceb2b4c06493ac107896ed6c76be9a613a4731f076d30fac0
+RWSwxGo/zH7eXY9lrmt21lTD16pDKR/G+ahUF7bC/7h/cLPOm6qgO9zzvHO9MfRveX3yJFnBzD1XiU+SvguWOKH/w7AmXVgAMQo=
+SHA256 (Pkgfile) = 840182a302849c5ce52e8609ad68696410657df7c2e3d4625dd78a5a0a772a4e
+SHA256 (.footprint) = c75bcf48d68e0f95036dd9a429c6d6adb118c9205d21de20eb30d4f65784e8f9
+SHA256 (libsndfile-1.0.28.tar.gz) = 1ff33929f042fa333aed1e8923aa628c3ee9e1eb85512686c55092d1e5a9dfa9
+SHA256 (0001-FLAC-Fix-a-buffer-read-overrun.patch) = 256eda5665ccad5a38030594f83a16ae9b271f8d0dd31f4d3b650bafaf93aef0
+SHA256 (0002-src-flac.c-Fix-a-buffer-read-overflow.patch) = 9d86583733521602e6b5ca52730bfe0727b9beef513db82552930477bf3c99e2
+SHA256 (0010-src-aiff.c-Fix-a-buffer-read-overflow.patch) = 3635a53dae48f02123872c9c0234ca55b38bc260dc37a5813b7211da85ba73f3
+SHA256 (0020-src-common.c-Fix-heap-buffer-overflows-when-writing.patch) = 7a2a37bcae3f4c48a79b06127964d34fbaf66011a31060680516434848800aad
diff --git a/libsndfile-32/Pkgfile b/libsndfile-32/Pkgfile
index 8c214d07..c8e99020 100644
--- a/libsndfile-32/Pkgfile
+++ b/libsndfile-32/Pkgfile
@@ -4,19 +4,27 @@
 # Depends on: flac-32 alsa-lib-32 libvorbis-32 libsndfile
 
 name=libsndfile-32
-version=1.0.27
+version=1.0.28
 release=1
-source=(http://www.mega-nerd.com/libsndfile/files/libsndfile-$version.tar.gz)
+source=(http://www.mega-nerd.com/libsndfile/files/libsndfile-$version.tar.gz
+	0001-FLAC-Fix-a-buffer-read-overrun.patch
+	0002-src-flac.c-Fix-a-buffer-read-overflow.patch
+	0010-src-aiff.c-Fix-a-buffer-read-overflow.patch
+	0020-src-common.c-Fix-heap-buffer-overflows-when-writing.patch)
 
 build() {
 	cd libsndfile-$version
 
-	#export GETCONF="getconf -v POSIX_V7_ILP32_OFFBIG"
-	#export GETCONF_DIR="/usr/lib32/getconf"
+	patch -p1 -i $SRC/0001-FLAC-Fix-a-buffer-read-overrun.patch
+	patch -p1 -i $SRC/0002-src-flac.c-Fix-a-buffer-read-overflow.patch
+	patch -p1 -i $SRC/0010-src-aiff.c-Fix-a-buffer-read-overflow.patch
+	patch -p1 -i $SRC/0020-src-common.c-Fix-heap-buffer-overflows-when-writing.patch
 
 	./configure \
 		--prefix=/usr \
-		--libdir=/usr/lib32
+		--libdir=/usr/lib32 \
+		--disable-static \
+		--with-pic
 
 	make
 	make DESTDIR=$PKG install