SUSE-SU-2026:3161-1

Details

Description of the patch:

This update for patch fixes the following issues

CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167).
CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).

Affected Packages

patch

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

2.7.6-150000.5.12.1

References

ADVISORY

https://bugzilla.suse.com/1271166

ADVISORY

https://bugzilla.suse.com/1271167

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-July/048515.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-56288/

ADVISORY

https://www.suse.com/security/cve/CVE-2026-56289/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20263161-1/