Explore top 10 tips to secure your open-source projects now. Read More
×
This update for alsa fixes the following issue
* CVE-2026-56109: crafted ALSA configuration text with nested blocks can cause
a double-free and memory corruption (bsc#1268853).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-2885=1
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2026-2885=1
* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-2885=1
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-2885=1
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2026-2885=1
* SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64)
* libasound2-1.2.6.1-150400.3.3.1
* alsa-debugsource-1.2.6.1-150400.3.3.1
* libasound2-debuginfo-1.2.6.1-150400.3.3.1
* SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64)
* libasound2-1.2.6.1-150400.3.3.1
* alsa-debugsource-1.2.6.1-150400.3.3.1
* libasound2-debuginfo-1.2.6.1-150400.3.3.1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* alsa-debugsource-1.2.6.1-150400.3.3.1
* libasound2-1.2.6.1-150400.3.3.1
* libasound2-debuginfo-1.2.6.1-150400.3.3.1
* alsa-1.2.6.1-150400.3.3.1
* alsa-devel-1.2.6.1-150400.3.3.1
* openSUSE Leap 15.4 (x86_64)
* libasound2-32bit-debuginfo-1.2.6.1-150400.3.3.1
* libatopology2-32bit-debuginfo-1.2.6.1-150400.3.3.1
* alsa-topology-devel-32bit-1.2.6.1-150400.3.3.1
* alsa-devel-32bit-1.2.6.1-150400.3.3.1
* libatopology2-32bit-1.2.6.1-150400.3.3.1
* libasound2-32bit-1.2.6.1-150400.3.3.1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le x86_64)
* libatopology2-debuginfo-1.2.6.1-150400.3.3.1
*...
Read the Full Advisory* bsc#1268853
## References:
* https://www.suse.com/security/cve/CVE-2026-56109.html
* https://bugzilla.suse.com/show_bug.cgi?id=1268853
Get the latest Linux and open source security news straight to your inbox.