{"schemaVersion":3,"id":"OPENSUSE-SU-2020:1804-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for binutils\n\nThis update for binutils fixes the following issues:\n\nbinutils was updated to version 2.35. (jsc#ECO-2373)\n\nUpdate to binutils 2.35:\n\n* The assembler can now produce DWARF-5 format line number tables.\n* Readelf now has a 'lint' mode to enable extra checks of the files it is processing.\n* Readelf will now display '[...]' when it has to truncate a symbol name.\n  The old behaviour - of displaying as many characters as possible, up to\n  the 80 column limit - can be restored by the use of the --silent-truncation\n  option.\n* The linker can now produce a dependency file listing the inputs that it\n  has processed, much like the -M -MP option supported by the compiler.\n\n- fix DT_NEEDED order with -flto [bsc#1163744]\n\n\nUpdate to binutils 2.34:\n\n* The disassembler (objdump --disassemble) now has an option to\n  generate ascii art thats show the arcs between that start and end\n  points of control flow instructions.\n* The binutils tools now have support for debuginfod.  Debuginfod is a\n  HTTP service for distributing ELF/DWARF debugging information as\n  well as source code.  The tools can now connect to debuginfod\n  servers in order to download debug information about the files that\n  they are processing.\n* The assembler and linker now support the generation of ELF format\n  files for the Z80 architecture.\n\n- Add new subpackages for libctf and libctf-nobfd.\n- Disable LTO due to bsc#1163333.\n- Includes fixes for these CVEs:\n  bsc#1153768 aka CVE-2019-17451 aka PR25070\n  bsc#1153770 aka CVE-2019-17450 aka PR25078\n\n- fix various build fails on aarch64 (PR25210, bsc#1157755).\n\nUpdate to binutils 2.33.1:\n\n* Adds support for the Arm Scalable Vector Extension version 2\n  (SVE2) instructions, the Arm Transactional Memory Extension (TME)\n  instructions and the Armv8.1-M Mainline and M-profile Vector\n  Extension (MVE) instructions.\n* Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P\n  processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,\n  Cortex-A76AE, and Cortex-A77 processors.\n* Adds a .float16 directive for both Arm and AArch64 to allow\n  encoding of 16-bit floating point literals.\n* For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)\n  Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]\n  configure time option to set the default behavior. Set the default\n  if the configure option is not used to 'no'.\n* The Cortex-A53 Erratum 843419 workaround now supports a choice of\n  which workaround to use.  The option --fix-cortex-a53-843419 now\n  takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]\n  which can be used to force a particular workaround to be used.\n  See --help for AArch64 for more details.\n* Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and\n  GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties\n  in the AArch64 ELF linker.\n* Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI\n  on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI\n  on inputs and use PLTs protected with BTI.\n* Add -z pac-plt for AArch64 to pick PAC enabled PLTs.\n* Add --source-comment[=<txt>] option to objdump which if present,\n  provides a prefix to source code lines displayed in a disassembly.\n* Add --set-section-alignment <section-name>=<power-of-2-align>\n  option to objcopy to allow the changing of section alignments.\n* Add --verilog-data-width option to objcopy for verilog targets to\n  control width of data elements in verilog hex format.\n* The separate debug info file options of readelf (--debug-dump=links\n  and --debug-dump=follow) and objdump (--dwarf=links and\n  --dwarf=follow-links) will now display and/or follow multiple\n  links if more than one are present in a file.  (This usually\n  happens when gcc's -gsplit-dwarf option is used).\n  In addition objdump's --dwarf=follow-links now also affects its\n  other display options, so that for example, when combined with\n  --syms it will cause the symbol tables in any linked debug info\n  files to also be displayed.  In addition when combined with\n  --disassemble the --dwarf= follow-links option will ensure that\n  any symbol tables in the linked files are read and used when\n  disassembling code in the main file.\n* Add support for dumping types encoded in the Compact Type Format\n  to objdump and readelf.\n- Includes fixes for these CVEs:\n  bsc#1126826 aka CVE-2019-9077 aka PR1126826\n  bsc#1126829 aka CVE-2019-9075 aka PR1126829\n  bsc#1126831 aka CVE-2019-9074 aka PR24235\n  bsc#1140126 aka CVE-2019-12972 aka PR23405\n  bsc#1143609 aka CVE-2019-14444 aka PR24829\n  bsc#1142649 aka CVE-2019-14250 aka PR90924\n\n* Add xBPF target\n* Fix various problems with DWARF 5 support in gas\n* fix nm -B for objects compiled with -flto and -fcommon.\n\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","dates":{"published":"2020-11-01T09:23:38.000Z","modified":"2026-02-04T02:55:16.081Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"binutils&distro=openSUSE Leap 15.2","name":"binutils","label":"binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-aarch64-binutils&distro=openSUSE Leap 15.2","name":"cross-aarch64-binutils","label":"cross-aarch64-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-aarch64-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-arm-binutils&distro=openSUSE Leap 15.2","name":"cross-arm-binutils","label":"cross-arm-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-arm-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-avr-binutils&distro=openSUSE Leap 15.2","name":"cross-avr-binutils","label":"cross-avr-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-avr-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-epiphany-binutils&distro=openSUSE Leap 15.2","name":"cross-epiphany-binutils","label":"cross-epiphany-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-epiphany-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-hppa-binutils&distro=openSUSE Leap 15.2","name":"cross-hppa-binutils","label":"cross-hppa-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-hppa-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-hppa64-binutils&distro=openSUSE Leap 15.2","name":"cross-hppa64-binutils","label":"cross-hppa64-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-hppa64-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-i386-binutils&distro=openSUSE Leap 15.2","name":"cross-i386-binutils","label":"cross-i386-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-i386-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-ia64-binutils&distro=openSUSE Leap 15.2","name":"cross-ia64-binutils","label":"cross-ia64-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-ia64-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-m68k-binutils&distro=openSUSE Leap 15.2","name":"cross-m68k-binutils","label":"cross-m68k-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-m68k-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-mips-binutils&distro=openSUSE Leap 15.2","name":"cross-mips-binutils","label":"cross-mips-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-mips-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-ppc-binutils&distro=openSUSE Leap 15.2","name":"cross-ppc-binutils","label":"cross-ppc-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-ppc-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-ppc64-binutils&distro=openSUSE Leap 15.2","name":"cross-ppc64-binutils","label":"cross-ppc64-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-ppc64-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-ppc64le-binutils&distro=openSUSE Leap 15.2","name":"cross-ppc64le-binutils","label":"cross-ppc64le-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-ppc64le-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-riscv64-binutils&distro=openSUSE Leap 15.2","name":"cross-riscv64-binutils","label":"cross-riscv64-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-riscv64-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-rx-binutils&distro=openSUSE Leap 15.2","name":"cross-rx-binutils","label":"cross-rx-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-rx-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-s390-binutils&distro=openSUSE Leap 15.2","name":"cross-s390-binutils","label":"cross-s390-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-s390-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-s390x-binutils&distro=openSUSE Leap 15.2","name":"cross-s390x-binutils","label":"cross-s390x-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-s390x-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-sparc-binutils&distro=openSUSE Leap 15.2","name":"cross-sparc-binutils","label":"cross-sparc-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-sparc-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-sparc64-binutils&distro=openSUSE Leap 15.2","name":"cross-sparc64-binutils","label":"cross-sparc64-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-sparc64-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-spu-binutils&distro=openSUSE Leap 15.2","name":"cross-spu-binutils","label":"cross-spu-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-spu-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cross-xtensa-binutils&distro=openSUSE Leap 15.2","name":"cross-xtensa-binutils","label":"cross-xtensa-binutils&distro=openSUSE Leap 15.2","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cross-xtensa-binutils&distro=openSUSE Leap 15.2","purlType":"rpm","versions":[{"text":"< 2.35-lp152.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35-lp152.4.3.1","eol":null,"hubHref":null}],"affectedCount":22,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HD525V55IWCMFIZABVL2WPYZ3F73Y4RP/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1126826","label":"bugzilla.suse.com/1126826","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1126829","label":"bugzilla.suse.com/1126829","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1126831","label":"bugzilla.suse.com/1126831","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1140126","label":"bugzilla.suse.com/1140126","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142649","label":"bugzilla.suse.com/1142649","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1143609","label":"bugzilla.suse.com/1143609","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1153768","label":"bugzilla.suse.com/1153768","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1153770","label":"bugzilla.suse.com/1153770","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1157755","label":"bugzilla.suse.com/1157755","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1160254","label":"bugzilla.suse.com/1160254","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1160590","label":"bugzilla.suse.com/1160590","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1163333","label":"bugzilla.suse.com/1163333","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1163744","label":"bugzilla.suse.com/1163744","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12972","label":"www.suse.com/security/cve/CVE-2019-12972","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14250","label":"www.suse.com/security/cve/CVE-2019-14250","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14444","label":"www.suse.com/security/cve/CVE-2019-14444","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17450","label":"www.suse.com/security/cve/CVE-2019-17450","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17451","label":"www.suse.com/security/cve/CVE-2019-17451","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9074","label":"www.suse.com/security/cve/CVE-2019-9074","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9075","label":"www.suse.com/security/cve/CVE-2019-9075","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9077","label":"www.suse.com/security/cve/CVE-2019-9077","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-12972","CVE-2019-14250","CVE-2019-14444","CVE-2019-17450","CVE-2019-17451","CVE-2019-9074","CVE-2019-9075","CVE-2019-9077"],"downstream":[],"duplicates":[],"related":["CVE-2019-12972","CVE-2019-14250","CVE-2019-14444","CVE-2019-17450","CVE-2019-17451","CVE-2019-9074","CVE-2019-9075","CVE-2019-9077"]},"timeline":[{"kind":"published","date":"2020-11-01T09:23:38.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:55:16.081Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T11:35:47.684Z","stale":false,"partial":false}}