{"schemaVersion":3,"id":"SUSE-SU-2025:21195-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for binutils\n\nThis update for binutils fixes the following issues:\n\nChanges in binutils:\n\n- Update to current 2.45 branch at 94cb1c075 to include fix\n  for PR33584 (a problem related to LTO vs fortran COMMON\n  blocks).\n\n- Do not enable '-z gcs=implicit' on aarch64 for old codestreams.\n\nUpdate to version 2.45:\n\n  * New versioned release of libsframe.so.2\n  * s390: tools now support SFrame format 2; recognize \"z17\" as CPU\n    name [bsc#1247105, jsc#IBM-1485]\n  * sframe sections are now of ELF section type SHT_GNU_SFRAME.\n  * sframe secions generated by the assembler have\n    SFRAME_F_FDE_FUNC_START_PCREL set.\n  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,\n    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,\n    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,\n    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,\n    zclsd v1.0, smrnmi v1.0;\n    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;\n    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;\n    T-Head: xtheadvdot v1.0;\n    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.\n  * Support RISC-V privileged version 1.13, profiles 20/22/23, and\n    .bfloat16 directive.\n  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,\n    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.\n    Drop support for  AVX10.2 256 bit rounding.\n  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and\n    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',\n    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',\n    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.\n  * Predefined symbols \"GAS(version)\" and, on non-release builds, \"GAS(date)\"\n    are now being made available.\n  * Add .errif and .warnif directives.\n  * linker:\n    - Add --image-base=<ADDR> option to the ELF linker to behave the same\n      as -Ttext-segment for compatibility with LLD.\n    - Add support for mixed LTO and non-LTO codes in relocatable output.\n    - s390: linker generates .eh_frame and/or .sframe for linker\n      generated .plt sections by default (can be disabled\n      by --no-ld-generated-unwind-info).\n    - riscv: add new PLT formats, and GNU property merge rules for zicfiss\n      and zicfilp extensions.\n- gold is no longer included\n\n- Contains fixes for these non-CVEs (not security bugs per upstreams\n  SECURITY.md):\n\n  * bsc#1236632 aka CVE-2025-0840 aka PR32560\n  * bsc#1236977 aka CVE-2025-1149 aka PR32576\n  * bsc#1236978 aka CVE-2025-1148 aka PR32576\n  * bsc#1236999 aka CVE-2025-1176 aka PR32636\n  * bsc#1237000 aka CVE-2025-1153 aka PR32603\n  * bsc#1237001 aka CVE-2025-1152 aka PR32576\n  * bsc#1237003 aka CVE-2025-1151 aka PR32576\n  * bsc#1237005 aka CVE-2025-1150 aka PR32576\n  * bsc#1237018 aka CVE-2025-1178 aka PR32638\n  * bsc#1237019 aka CVE-2025-1181 aka PR32643\n  * bsc#1237020 aka CVE-2025-1180 aka PR32642\n  * bsc#1237021 aka CVE-2025-1179 aka PR32640\n  * bsc#1237042 aka CVE-2025-1182 aka PR32644\n  * bsc#1240870 aka CVE-2025-3198 aka PR32716\n  * bsc#1243756 aka CVE-2025-5244 aka PR32858\n  * bsc#1243760 aka CVE-2025-5245 aka PR32829\n  * bsc#1246481 aka CVE-2025-7545 aka PR33049\n  * bsc#1246486 aka CVE-2025-7546 aka PR33050\n  * bsc#1247114 aka CVE-2025-8224 aka PR32109\n  * bsc#1247117 aka CVE-2025-8225 no PR\n  * bsc#1236976 aka CVE-2025-1147 aka PR32556\n  * bsc#1250632 aka CVE-2025-11083 aka PR33457\n  * bsc#1251275 aka CVE-2025-11412 aka PR33452\n  * bsc#1251276 aka CVE-2025-11413 aka PR33456\n  * bsc#1251277 aka CVE-2025-11414 aka PR33450\n  * bsc#1251794 aka CVE-2025-11494 aka PR33499\n  * bsc#1251795 aka CVE-2025-11495 aka PR33502\n  binutils-2.43-branch.diff.gz","dates":{"published":"2025-12-12T15:58:29.000Z","modified":"2026-03-23T04:49:17.894Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"binutils&distro=SUSE Linux Enterprise Server 16.0","name":"binutils","label":"binutils&distro=SUSE Linux Enterprise Server 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/binutils&distro=SUSE Linux Enterprise Server 16.0","purlType":"rpm","versions":[{"text":"< 2.45-160000.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.45-160000.1.1","eol":null,"hubHref":null},{"vendor":"suse","product":"binutils&distro=SUSE Linux Enterprise Server for SAP applications 16.0","name":"binutils","label":"binutils&distro=SUSE Linux Enterprise Server for SAP applications 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/binutils&distro=SUSE Linux Enterprise Server for SAP applications 16.0","purlType":"rpm","versions":[{"text":"< 2.45-160000.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.45-160000.1.1","eol":null,"hubHref":null},{"vendor":"suse","product":"bpftool&distro=SUSE Linux Enterprise Server 16.0","name":"bpftool","label":"bpftool&distro=SUSE Linux Enterprise Server 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bpftool&distro=SUSE Linux Enterprise Server 16.0","purlType":"rpm","versions":[{"text":"< 7.5.0-160000.2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-160000.2.3","eol":null,"hubHref":null},{"vendor":"suse","product":"bpftool&distro=SUSE Linux Enterprise Server for SAP applications 16.0","name":"bpftool","label":"bpftool&distro=SUSE Linux Enterprise Server for SAP applications 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/bpftool&distro=SUSE Linux Enterprise Server for SAP applications 16.0","purlType":"rpm","versions":[{"text":"< 7.5.0-160000.2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.0-160000.2.3","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521195-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202521195-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1236632","label":"bugzilla.suse.com/1236632","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1236976","label":"bugzilla.suse.com/1236976","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1236977","label":"bugzilla.suse.com/1236977","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1236978","label":"bugzilla.suse.com/1236978","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1236999","label":"bugzilla.suse.com/1236999","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237000","label":"bugzilla.suse.com/1237000","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237001","label":"bugzilla.suse.com/1237001","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237003","label":"bugzilla.suse.com/1237003","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237005","label":"bugzilla.suse.com/1237005","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237018","label":"bugzilla.suse.com/1237018","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237019","label":"bugzilla.suse.com/1237019","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237020","label":"bugzilla.suse.com/1237020","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237021","label":"bugzilla.suse.com/1237021","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1237042","label":"bugzilla.suse.com/1237042","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1240870","label":"bugzilla.suse.com/1240870","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1243756","label":"bugzilla.suse.com/1243756","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1243760","label":"bugzilla.suse.com/1243760","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246481","label":"bugzilla.suse.com/1246481","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246486","label":"bugzilla.suse.com/1246486","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247105","label":"bugzilla.suse.com/1247105","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247114","label":"bugzilla.suse.com/1247114","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247117","label":"bugzilla.suse.com/1247117","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250632","label":"bugzilla.suse.com/1250632","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251275","label":"bugzilla.suse.com/1251275","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251276","label":"bugzilla.suse.com/1251276","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251277","label":"bugzilla.suse.com/1251277","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251794","label":"bugzilla.suse.com/1251794","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251795","label":"bugzilla.suse.com/1251795","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0840","label":"www.suse.com/security/cve/CVE-2025-0840","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11083","label":"www.suse.com/security/cve/CVE-2025-11083","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11412","label":"www.suse.com/security/cve/CVE-2025-11412","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11413","label":"www.suse.com/security/cve/CVE-2025-11413","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11414","label":"www.suse.com/security/cve/CVE-2025-11414","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1147","label":"www.suse.com/security/cve/CVE-2025-1147","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1148","label":"www.suse.com/security/cve/CVE-2025-1148","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1149","label":"www.suse.com/security/cve/CVE-2025-1149","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11494","label":"www.suse.com/security/cve/CVE-2025-11494","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11495","label":"www.suse.com/security/cve/CVE-2025-11495","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1150","label":"www.suse.com/security/cve/CVE-2025-1150","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1151","label":"www.suse.com/security/cve/CVE-2025-1151","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1152","label":"www.suse.com/security/cve/CVE-2025-1152","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1153","label":"www.suse.com/security/cve/CVE-2025-1153","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1176","label":"www.suse.com/security/cve/CVE-2025-1176","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1178","label":"www.suse.com/security/cve/CVE-2025-1178","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1179","label":"www.suse.com/security/cve/CVE-2025-1179","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1180","label":"www.suse.com/security/cve/CVE-2025-1180","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1181","label":"www.suse.com/security/cve/CVE-2025-1181","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1182","label":"www.suse.com/security/cve/CVE-2025-1182","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3198","label":"www.suse.com/security/cve/CVE-2025-3198","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5244","label":"www.suse.com/security/cve/CVE-2025-5244","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5245","label":"www.suse.com/security/cve/CVE-2025-5245","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7545","label":"www.suse.com/security/cve/CVE-2025-7545","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7546","label":"www.suse.com/security/cve/CVE-2025-7546","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8224","label":"www.suse.com/security/cve/CVE-2025-8224","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8225","label":"www.suse.com/security/cve/CVE-2025-8225","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2025-0840","CVE-2025-11083","CVE-2025-11412","CVE-2025-11413","CVE-2025-11414","CVE-2025-1147","CVE-2025-1148","CVE-2025-1149","CVE-2025-11494","CVE-2025-11495","CVE-2025-1150","CVE-2025-1151","CVE-2025-1152","CVE-2025-1153","CVE-2025-1176","CVE-2025-1178","CVE-2025-1179","CVE-2025-1180","CVE-2025-1181","CVE-2025-1182","CVE-2025-3198","CVE-2025-5244","CVE-2025-5245","CVE-2025-7545","CVE-2025-7546","CVE-2025-8224","CVE-2025-8225"],"downstream":[],"duplicates":[],"related":["CVE-2025-0840","CVE-2025-11083","CVE-2025-11412","CVE-2025-11413","CVE-2025-11414","CVE-2025-1147","CVE-2025-1148","CVE-2025-1149","CVE-2025-11494","CVE-2025-11495","CVE-2025-1150","CVE-2025-1151","CVE-2025-1152","CVE-2025-1153","CVE-2025-1176","CVE-2025-1178","CVE-2025-1179","CVE-2025-1180","CVE-2025-1181","CVE-2025-1182","CVE-2025-3198","CVE-2025-5244","CVE-2025-5245","CVE-2025-7545","CVE-2025-7546","CVE-2025-8224","CVE-2025-8225"]},"timeline":[{"kind":"published","date":"2025-12-12T15:58:29.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-23T04:49:17.894Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T11:32:24.230Z","stale":false,"partial":false}}