SUSE-SU-2026:3178-1

Details

Description of the patch:

This update for nasm fixes the following issues

CVE-2026-6067: heap buffer overflow vulnerability due to a lack of bounds checking in the obj_directive() function (bsc#1261986).
CVE-2026-6068: heap use after free vulnerability in response file processing (bsc#1261985).

Affected Packages

nasm

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Development Tools 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

2.16.03-150700.3.3.1

References

ADVISORY

https://bugzilla.suse.com/1261985

ADVISORY

https://bugzilla.suse.com/1261986

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-July/027738.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-6067/

ADVISORY

https://www.suse.com/security/cve/CVE-2026-6068/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20263178-1/