{"id":"CVE-2025-11495","aliases":["BELL-CVE-2025-11495","DEBIAN-CVE-2025-11495","EUVD-2025-33282","GHSA-q93h-5j3x-2h4v","RHSA-2026:7098","ROOT-OS-DEBIAN-12-CVE-2025-11495","SUSE-SU-2025:21195-1","SUSE-SU-2025:21197-1","SUSE-SU-2025:4096-1","UBUNTU-CVE-2025-11495","openSUSE-SU-2025:15651-1","openSUSE-SU-2025:20150-1"],"status":"published","title":"GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00242,"percentile":0.1547,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-122"],"published":"2025-10-08T20:02:07Z","modified":"2026-10-28T02:31:09Z","fixes":[{"ecosystem":"Alpaquita:25","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"binutils","fixed_in":["2.45-r2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"binutils","fixed_in":["2.46-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"binutils","fixed_in":["2.40-2.root.io.15","2.40-2.root.io.16","2.40-2.root.io.17","2.40-2.root.io.18","2.40-2.root.io.19","2.40-2.root.io.20","2.40-2.root.io.21","2.40-2.root.io.22","2.40-2.root.io.23","2.40-2.root.io.24","2.40-2.aikido.25"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-binutils","fixed_in":["2.40-2.root.io.15","2.40-2.root.io.16","2.40-2.root.io.17","2.40-2.root.io.18","2.40-2.root.io.19","2.40-2.root.io.20","2.40-2.root.io.21","2.40-2.root.io.22","2.40-2.root.io.23","2.40-2.root.io.24","2.40-2.aikido.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"binutils","fixed_in":["2.45-7ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:25","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.44-r0"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.40-r4"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.44-r0"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.40-r4"},{"fixed":"2.45-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40-2","2.40.50.20230111-1","2.40.50.20230215-1","2.40.50.20230501-1","2.40.50.20230510-1","2.40.50.20230602-1","2.40.50.20230611-1","2.40.50.20230611-2","2.40.50.20230622-1","2.40.50.20230625-1","2.40.50.20230630-1","2.40.90.20230705-1","2.40.90.20230714-1","2.40.90.20230714-2","2.40.90.20230720-1","2.40.90.20230729-1","2.40.90.20230729-2","2.41-1","2.41-2","2.41-3","2.41-4","2.41-5","2.41-6","2.41-7","2.41.50.20230731-1","2.41.50.20230803-1","2.41.50.20230905-1","2.41.50.20231010-1","2.41.50.20231101-1","2.41.50.20231125-1","2.41.50.20231202-1","2.41.50.20231206-1","2.41.50.20231214-1","2.41.50.20231227-1","2.41.90.20240115-1","2.41.90.20240122-1","2.42-1","2.42-2","2.42-2+hurd.1","2.42-3","2.42-4","2.42.50.20240614-1","2.42.50.20240618-1","2.42.50.20240625-1","2.42.50.20240710-1","2.42.90.20240720-1","2.42.90.20240720-2","2.43-1","2.43-2","2.43.1-1","2.43.1-2","2.43.1-3","2.43.1-4","2.43.1-5","2.43.50.20240817-1","2.43.50.20240909-1","2.43.50.20241004-1","2.43.50.20241112-1","2.43.50.20241126-1","2.43.50.20241126-2","2.43.50.20241126-3","2.43.50.20241204-1","2.43.50.20241204-2","2.43.50.20241210-1","2.43.50.20241215-1","2.43.50.20241221-1","2.43.50.20241230-1","2.43.50.20250108-1","2.43.90.20250122-1","2.43.90.20250122-2","2.43.90.20250127-1","2.43.90.20250202-1","2.44-1","2.44-2","2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1"]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1"]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46-1"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gprofng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.45.1-5.hum1"}]}],"bundled":25},{"source":"osv","ecosystem":"Root:Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-2.root.io.15"},{"fixed":"2.40-2.root.io.16"},{"fixed":"2.40-2.root.io.17"},{"fixed":"2.40-2.root.io.18"},{"fixed":"2.40-2.root.io.19"},{"fixed":"2.40-2.root.io.20"},{"fixed":"2.40-2.root.io.21"},{"fixed":"2.40-2.root.io.22"},{"fixed":"2.40-2.root.io.23"},{"fixed":"2.40-2.root.io.24"},{"fixed":"2.40-2.aikido.25"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40-2.root.io.15"},{"fixed":"2.40-2.root.io.16"},{"fixed":"2.40-2.root.io.17"},{"fixed":"2.40-2.root.io.18"},{"fixed":"2.40-2.root.io.19"},{"fixed":"2.40-2.root.io.20"},{"fixed":"2.40-2.root.io.21"},{"fixed":"2.40-2.root.io.22"},{"fixed":"2.40-2.root.io.23"},{"fixed":"2.40-2.root.io.24"},{"fixed":"2.40-2.aikido.25"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0-160000.2.3"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0-160000.2.3"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-150600.3.5.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0-150700.4.2.7"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0.git33229.a3afe13a7f-150600.3.17.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0.git54263.0aad576b1c-150700.3.2.2"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150300.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.38.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150400.4.2.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.44.20.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150400.4.2.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.44.20.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150500.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.52.5.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150500.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.52.5.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150300.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.38.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150400.4.2.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.44.20.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150500.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.52.5.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150300.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.38.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150400.4.2.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150400.44.20.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.1-150500.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.52.5.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150400.4.2.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-150400.4.2.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-150300.4.2.5"}]}],"bundled":27},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18-150300.38.7.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-aarch64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-arm-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-avr-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-bpf-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-epiphany-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-hppa-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-hppa64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-i386-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-ia64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-m68k-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-mips-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-ppc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-ppc64le-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-pru-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-riscv64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-rx-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-s390-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-s390x-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-sparc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-sparc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-x86_64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cross-xtensa-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-150100.7.57.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"openucx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-150600.3.5.2"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0.git33229.a3afe13a7f-150600.3.17.1"}]}],"bundled":27},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5","2.24-5ubuntu14.2+esm6","2.24-5ubuntu14.2+esm7","2.24-5ubuntu14.2+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9","2.26.1-1ubuntu1~16.04.8+esm11","2.26.1-1ubuntu1~16.04.8+esm12","2.26.1-1ubuntu1~16.04.8+esm13","2.26.1-1ubuntu1~16.04.8+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3","2.30-21ubuntu1~18.04.9+esm4","2.30-21ubuntu1~18.04.9+esm5","2.30-21ubuntu1~18.04.9+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6","2.34-6ubuntu1.7","2.34-6ubuntu1.8","2.34-6ubuntu1.9","2.34-6ubuntu1.10","2.34-6ubuntu1.11","2.34-6ubuntu1.11+esm1","2.34-6ubuntu1.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3","2.38-4ubuntu2.4","2.38-4ubuntu2.5","2.38-4ubuntu2.6","2.38-4ubuntu2.7","2.38-4ubuntu2.8","2.38-4ubuntu2.10","2.38-4ubuntu2.11","2.38-4ubuntu2.12"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.41-5ubuntu1","2.41-6ubuntu1","2.41.50.20231206-1ubuntu1","2.41.50.20231214-1ubuntu1","2.41.50.20231227-1ubuntu1","2.41.90.20240122-1ubuntu1","2.42-2ubuntu1","2.42-3ubuntu1","2.42-4ubuntu1","2.42-4ubuntu2","2.42-4ubuntu2.3","2.42-4ubuntu2.4","2.42-4ubuntu2.5","2.42-4ubuntu2.6","2.42-4ubuntu2.7","2.42-4ubuntu2.8","2.42-4ubuntu2.10"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-7ubuntu1.2"}]}],"versions":["2.44-3ubuntu1","2.44.50.20250602-0ubuntu1","2.44.50.20250604-0ubuntu2","2.44.50.20250616-0ubuntu1","2.44.50.20250707-1ubuntu1","2.45-1ubuntu1","2.45-3ubuntu3","2.45-6ubuntu1","2.45-7ubuntu1","2.45-7ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-1.2"}]}],"bundled":26},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0-160000.2.3"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-aarch64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-arm-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-avr-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-bpf-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-epiphany-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-hppa-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-hppa64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-i386-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-ia64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-loongarch64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-m68k-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-mips-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-ppc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-ppc64le-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-pru-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-riscv64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-rx-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-s390-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-s390x-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-sparc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-sparc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-x86_64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cross-xtensa-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45-160000.1.1"}]}],"bundled":27}],"products":[{"vendor":"gnu","product":"binutils"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://vuldb.com/?id.327620","tags":["vdb-entry","technical-description","Third Party Advisory","VDB Entry","advisory","article","report"]},{"url":"https://vuldb.com/?ctiid.327620","tags":["signature","permissions-required","Permissions Required","VDB Entry","report","article"]},{"url":"https://vuldb.com/?submit.668290","tags":["third-party-advisory","Third Party Advisory","VDB Entry","advisory","article","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33502","tags":["issue-tracking","Exploit","Issue Tracking","report","article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3","tags":["issue-tracking","Exploit","Issue Tracking","report","article"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16393","tags":["exploit","Broken Link","evidence","article","report"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0","tags":["patch","Patch","fix","article"]},{"url":"https://www.gnu.org/","tags":["product","Product","web","article","report"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11495","tags":["advisory"]},{"url":"https://www.gnu.org"},{"url":"https://github.com/advisories/GHSA-q93h-5j3x-2h4v"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-11495","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11495.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-11495","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7098","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69645","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11083","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11082","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11081","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11840","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11839","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11495","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11494","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11414","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11413","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-11412","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66866","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66864","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66862","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66863","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66861","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-66865","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69648","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69647","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69646","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69650","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69652","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69651","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69649","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-69644","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7098.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399944","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11081","tags":["advisory"]},{"url":"https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33406","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326122","tags":["article"]},{"url":"https://vuldb.com/?id.326122","tags":["article"]},{"url":"https://vuldb.com/?submit.661275","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11082","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16358","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326123","tags":["article"]},{"url":"https://vuldb.com/?id.326123","tags":["article"]},{"url":"https://vuldb.com/?submit.661276","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2399948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11083","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11083","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16353","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490","tags":["article"]},{"url":"https://vuldb.com/?ctiid.326124","tags":["article"]},{"url":"https://vuldb.com/?id.326124","tags":["article"]},{"url":"https://vuldb.com/?submit.661277","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11412","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33452","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc","tags":["article"]},{"url":"https://vuldb.com/?id.327348","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11413","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33456","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0","tags":["article"]},{"url":"https://vuldb.com/?id.327349","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11414","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33450","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703","tags":["article"]},{"url":"https://vuldb.com/?id.327350","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402559","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11494","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16389","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33499","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33499#c2","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a","tags":["article"]},{"url":"https://vuldb.com/?ctiid.327619","tags":["article"]},{"url":"https://vuldb.com/?id.327619","tags":["article"]},{"url":"https://vuldb.com/?submit.668281","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2402584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11495","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11839","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11839","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16344","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33448","tags":["article"]},{"url":"https://vuldb.com/?ctiid.328774","tags":["article"]},{"url":"https://vuldb.com/?id.328774","tags":["article"]},{"url":"https://vuldb.com/?submit.661279","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404481","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11840","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16351","tags":["article"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16357","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33455","tags":["article"]},{"url":"https://vuldb.com/?ctiid.328775","tags":["article"]},{"url":"https://vuldb.com/?id.328775","tags":["article"]},{"url":"https://vuldb.com/?submit.661281","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66861","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66862","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash3.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66863","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66863","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425827","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66864","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66864","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash5.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425822","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66865","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-66866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66866","tags":["advisory"]},{"url":"https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash6.md","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69644","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33639","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69645","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33637","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cdb728d4da6184631989b192f1022c219dea7677","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69646","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69646","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33638","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445773","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69647","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33640","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445774","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69648","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69648","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33641","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69649","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69649","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33697","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33698","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69651","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33700","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445296","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-69652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69652","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33701","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521195-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236632","tags":["report"]},{"url":"https://bugzilla.suse.com/1236976","tags":["report"]},{"url":"https://bugzilla.suse.com/1236977","tags":["report"]},{"url":"https://bugzilla.suse.com/1236978","tags":["report"]},{"url":"https://bugzilla.suse.com/1236999","tags":["report"]},{"url":"https://bugzilla.suse.com/1237000","tags":["report"]},{"url":"https://bugzilla.suse.com/1237001","tags":["report"]},{"url":"https://bugzilla.suse.com/1237003","tags":["report"]},{"url":"https://bugzilla.suse.com/1237005","tags":["report"]},{"url":"https://bugzilla.suse.com/1237018","tags":["report"]},{"url":"https://bugzilla.suse.com/1237019","tags":["report"]},{"url":"https://bugzilla.suse.com/1237020","tags":["report"]},{"url":"https://bugzilla.suse.com/1237021","tags":["report"]},{"url":"https://bugzilla.suse.com/1237042","tags":["report"]},{"url":"https://bugzilla.suse.com/1240870","tags":["report"]},{"url":"https://bugzilla.suse.com/1243756","tags":["report"]},{"url":"https://bugzilla.suse.com/1243760","tags":["report"]},{"url":"https://bugzilla.suse.com/1246481","tags":["report"]},{"url":"https://bugzilla.suse.com/1246486","tags":["report"]},{"url":"https://bugzilla.suse.com/1247105","tags":["report"]},{"url":"https://bugzilla.suse.com/1247114","tags":["report"]},{"url":"https://bugzilla.suse.com/1247117","tags":["report"]},{"url":"https://bugzilla.suse.com/1250632","tags":["report"]},{"url":"https://bugzilla.suse.com/1251275","tags":["report"]},{"url":"https://bugzilla.suse.com/1251276","tags":["report"]},{"url":"https://bugzilla.suse.com/1251277","tags":["report"]},{"url":"https://bugzilla.suse.com/1251794","tags":["report"]},{"url":"https://bugzilla.suse.com/1251795","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-8225","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521197-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254096-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040589","tags":["report"]},{"url":"https://bugzilla.suse.com/1241916","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-11495","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7919-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-11495","title":"GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","status":"published","published":"2025-10-08T20:02:07.807Z","modified":"2026-10-15T01:02:33.863Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C","assessor":"cna"}],"cwes":["CWE-122","CWE-119"],"updated_at":"2026-11-02T14:32:50.872559Z"}],"euvd":[{"id":"EUVD-2025-33282","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","status":"published","published":"2025-10-08T20:02:07Z","modified":"2026-10-15T01:02:33Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T17:27:08.111721Z"}],"ghsa":[{"id":"GHSA-q93h-5j3x-2h4v","title":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function...","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","status":"published","published":"2025-10-08T21:30:34Z","modified":"2026-05-12T15:31:12Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:08:03.879292Z"}],"nvd":[{"id":"CVE-2025-11495","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","status":"published","published":"2025-10-08T20:15:34.99Z","modified":"2026-10-08T13:10:00.2Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","level":"low","assessor":"secondary"}],"cwes":["CWE-119","CWE-122"],"updated_at":"2026-11-02T14:11:35.93863Z"}],"osv":[{"id":"BELL-CVE-2025-11495","status":"published","published":"2025-10-10T06:04:53.78867Z","modified":"2026-01-26T09:41:22.62496Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-11495","title":"GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","status":"published","published":"2025-10-08T20:02:07.807Z","modified":"2026-10-28T02:31:09.793738274Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-119","CWE-122"],"updated_at":"2026-11-02T15:44:46.024537Z"},{"id":"DEBIAN-CVE-2025-11495","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","status":"published","published":"2025-10-08T20:15:34.99Z","modified":"2026-10-09T10:00:42.36160048Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"RHSA-2026:7098","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-18T10:06:19Z","modified":"2026-10-15T10:25:31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-11495","title":"CVE-2025-11495 in binutils - Patched by Root","description":"Root has patched CVE-2025-11495 in the binutils package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T10:13:46Z","modified":"2026-08-26T01:10:24.105108953Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"UBUNTU-CVE-2025-11495","description":"A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.","status":"published","published":"2025-10-08T20:15:00Z","modified":"2026-04-22T15:29:47.427273Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"openSUSE-SU-2025:15651-1","title":"binutils-2.45-1.2 on GA media","description":"These are all security issues fixed in the binutils-2.45-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-21T00:00:00Z","modified":"2026-03-23T04:54:03.140712Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20150-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nChanges in binutils:\n\n- Update to current 2.45 branch at 94cb1c075 to include fix\n  for PR33584 (a problem related to LTO vs fortran COMMON\n  blocks).\n\n- Do not enable '-z gcs=implicit' on aarch64 for old codestreams.\n\nUpdate to version 2.45:\n\n  * New versioned release of libsframe.so.2\n  * s390: tools now support SFrame format 2; recognize \"z17\" as CPU\n    name [bsc#1247105, jsc#IBM-1485]\n  * sframe sections are now of ELF section type SHT_GNU_SFRAME.\n  * sframe secions generated by the assembler have\n    SFRAME_F_FDE_FUNC_START_PCREL set.\n  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,\n    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,\n    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,\n    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,\n    zclsd v1.0, smrnmi v1.0;\n    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;\n    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;\n    T-Head: xtheadvdot v1.0;\n    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.\n  * Support RISC-V privileged version 1.13, profiles 20/22/23, and\n    .bfloat16 directive.\n  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,\n    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.\n    Drop support for  AVX10.2 256 bit rounding.\n  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and\n    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',\n    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',\n    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.\n  * Predefined symbols \"GAS(version)\" and, on non-release builds, \"GAS(date)\"\n    are now being made available.\n  * Add .errif and .warnif directives.\n  * linker:\n    - Add --image-base=\u003cADDR\u003e option to the ELF linker to behave the same\n      as -Ttext-segment for compatibility with LLD.\n    - Add support for mixed LTO and non-LTO codes in relocatable output.\n    - s390: linker generates .eh_frame and/or .sframe for linker\n      generated .plt sections by default (can be disabled\n      by --no-ld-generated-unwind-info).\n    - riscv: add new PLT formats, and GNU property merge rules for zicfiss\n      and zicfilp extensions.\n- gold is no longer included\n\n- Contains fixes for these non-CVEs (not security bugs per upstreams\n  SECURITY.md):\n\n  * bsc#1236632 aka CVE-2025-0840 aka PR32560\n  * bsc#1236977 aka CVE-2025-1149 aka PR32576\n  * bsc#1236978 aka CVE-2025-1148 aka PR32576\n  * bsc#1236999 aka CVE-2025-1176 aka PR32636\n  * bsc#1237000 aka CVE-2025-1153 aka PR32603\n  * bsc#1237001 aka CVE-2025-1152 aka PR32576\n  * bsc#1237003 aka CVE-2025-1151 aka PR32576\n  * bsc#1237005 aka CVE-2025-1150 aka PR32576\n  * bsc#1237018 aka CVE-2025-1178 aka PR32638\n  * bsc#1237019 aka CVE-2025-1181 aka PR32643\n  * bsc#1237020 aka CVE-2025-1180 aka PR32642\n  * bsc#1237021 aka CVE-2025-1179 aka PR32640\n  * bsc#1237042 aka CVE-2025-1182 aka PR32644\n  * bsc#1240870 aka CVE-2025-3198 aka PR32716\n  * bsc#1243756 aka CVE-2025-5244 aka PR32858\n  * bsc#1243760 aka CVE-2025-5245 aka PR32829\n  * bsc#1246481 aka CVE-2025-7545 aka PR33049\n  * bsc#1246486 aka CVE-2025-7546 aka PR33050\n  * bsc#1247114 aka CVE-2025-8224 aka PR32109\n  * bsc#1247117 aka CVE-2025-8225 no PR\n  * bsc#1236976 aka CVE-2025-1147 aka PR32556\n  * bsc#1250632 aka CVE-2025-11083 aka PR33457\n  * bsc#1251275 aka CVE-2025-11412 aka PR33452\n  * bsc#1251276 aka CVE-2025-11413 aka PR33456\n  * bsc#1251277 aka CVE-2025-11414 aka PR33450\n  * bsc#1251794 aka CVE-2025-11494 aka PR33499\n  * bsc#1251795 aka CVE-2025-11495 aka PR33502\n  binutils-2.43-branch.diff.gz\n","status":"published","published":"2025-12-12T15:58:27Z","modified":"2026-03-23T04:54:18.685598Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"SUSE-SU-2025:21195-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nChanges in binutils:\n\n- Update to current 2.45 branch at 94cb1c075 to include fix\n  for PR33584 (a problem related to LTO vs fortran COMMON\n  blocks).\n\n- Do not enable '-z gcs=implicit' on aarch64 for old codestreams.\n\nUpdate to version 2.45:\n\n  * New versioned release of libsframe.so.2\n  * s390: tools now support SFrame format 2; recognize \"z17\" as CPU\n    name [bsc#1247105, jsc#IBM-1485]\n  * sframe sections are now of ELF section type SHT_GNU_SFRAME.\n  * sframe secions generated by the assembler have\n    SFRAME_F_FDE_FUNC_START_PCREL set.\n  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,\n    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,\n    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,\n    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,\n    zclsd v1.0, smrnmi v1.0;\n    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;\n    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;\n    T-Head: xtheadvdot v1.0;\n    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.\n  * Support RISC-V privileged version 1.13, profiles 20/22/23, and\n    .bfloat16 directive.\n  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,\n    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.\n    Drop support for  AVX10.2 256 bit rounding.\n  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and\n    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',\n    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',\n    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.\n  * Predefined symbols \"GAS(version)\" and, on non-release builds, \"GAS(date)\"\n    are now being made available.\n  * Add .errif and .warnif directives.\n  * linker:\n    - Add --image-base=\u003cADDR\u003e option to the ELF linker to behave the same\n      as -Ttext-segment for compatibility with LLD.\n    - Add support for mixed LTO and non-LTO codes in relocatable output.\n    - s390: linker generates .eh_frame and/or .sframe for linker\n      generated .plt sections by default (can be disabled\n      by --no-ld-generated-unwind-info).\n    - riscv: add new PLT formats, and GNU property merge rules for zicfiss\n      and zicfilp extensions.\n- gold is no longer included\n\n- Contains fixes for these non-CVEs (not security bugs per upstreams\n  SECURITY.md):\n\n  * bsc#1236632 aka CVE-2025-0840 aka PR32560\n  * bsc#1236977 aka CVE-2025-1149 aka PR32576\n  * bsc#1236978 aka CVE-2025-1148 aka PR32576\n  * bsc#1236999 aka CVE-2025-1176 aka PR32636\n  * bsc#1237000 aka CVE-2025-1153 aka PR32603\n  * bsc#1237001 aka CVE-2025-1152 aka PR32576\n  * bsc#1237003 aka CVE-2025-1151 aka PR32576\n  * bsc#1237005 aka CVE-2025-1150 aka PR32576\n  * bsc#1237018 aka CVE-2025-1178 aka PR32638\n  * bsc#1237019 aka CVE-2025-1181 aka PR32643\n  * bsc#1237020 aka CVE-2025-1180 aka PR32642\n  * bsc#1237021 aka CVE-2025-1179 aka PR32640\n  * bsc#1237042 aka CVE-2025-1182 aka PR32644\n  * bsc#1240870 aka CVE-2025-3198 aka PR32716\n  * bsc#1243756 aka CVE-2025-5244 aka PR32858\n  * bsc#1243760 aka CVE-2025-5245 aka PR32829\n  * bsc#1246481 aka CVE-2025-7545 aka PR33049\n  * bsc#1246486 aka CVE-2025-7546 aka PR33050\n  * bsc#1247114 aka CVE-2025-8224 aka PR32109\n  * bsc#1247117 aka CVE-2025-8225 no PR\n  * bsc#1236976 aka CVE-2025-1147 aka PR32556\n  * bsc#1250632 aka CVE-2025-11083 aka PR33457\n  * bsc#1251275 aka CVE-2025-11412 aka PR33452\n  * bsc#1251276 aka CVE-2025-11413 aka PR33456\n  * bsc#1251277 aka CVE-2025-11414 aka PR33450\n  * bsc#1251794 aka CVE-2025-11494 aka PR33499\n  * bsc#1251795 aka CVE-2025-11495 aka PR33502\n  binutils-2.43-branch.diff.gz\n","status":"published","published":"2025-12-12T15:58:29Z","modified":"2026-03-23T04:49:17.894873Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:21197-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nChanges in binutils:\n\n- Update to current 2.45 branch at 94cb1c075 to include fix\n  for PR33584 (a problem related to LTO vs fortran COMMON\n  blocks).\n\n- Do not enable '-z gcs=implicit' on aarch64 for old codestreams.\n\nUpdate to version 2.45:\n\n  * New versioned release of libsframe.so.2\n  * s390: tools now support SFrame format 2; recognize \"z17\" as CPU\n    name [bsc#1247105, jsc#IBM-1485]\n  * sframe sections are now of ELF section type SHT_GNU_SFRAME.\n  * sframe secions generated by the assembler have\n    SFRAME_F_FDE_FUNC_START_PCREL set.\n  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,\n    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,\n    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,\n    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,\n    zclsd v1.0, smrnmi v1.0;\n    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;\n    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;\n    T-Head: xtheadvdot v1.0;\n    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.\n  * Support RISC-V privileged version 1.13, profiles 20/22/23, and\n    .bfloat16 directive.\n  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,\n    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.\n    Drop support for  AVX10.2 256 bit rounding.\n  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and\n    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',\n    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',\n    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.\n  * Predefined symbols \"GAS(version)\" and, on non-release builds, \"GAS(date)\"\n    are now being made available.\n  * Add .errif and .warnif directives.\n  * linker:\n    - Add --image-base=\u003cADDR\u003e option to the ELF linker to behave the same\n      as -Ttext-segment for compatibility with LLD.\n    - Add support for mixed LTO and non-LTO codes in relocatable output.\n    - s390: linker generates .eh_frame and/or .sframe for linker\n      generated .plt sections by default (can be disabled\n      by --no-ld-generated-unwind-info).\n    - riscv: add new PLT formats, and GNU property merge rules for zicfiss\n      and zicfilp extensions.\n- gold is no longer included\n\n- Contains fixes for these non-CVEs (not security bugs per upstreams\n  SECURITY.md):\n\n  * bsc#1236632 aka CVE-2025-0840 aka PR32560\n  * bsc#1236977 aka CVE-2025-1149 aka PR32576\n  * bsc#1236978 aka CVE-2025-1148 aka PR32576\n  * bsc#1236999 aka CVE-2025-1176 aka PR32636\n  * bsc#1237000 aka CVE-2025-1153 aka PR32603\n  * bsc#1237001 aka CVE-2025-1152 aka PR32576\n  * bsc#1237003 aka CVE-2025-1151 aka PR32576\n  * bsc#1237005 aka CVE-2025-1150 aka PR32576\n  * bsc#1237018 aka CVE-2025-1178 aka PR32638\n  * bsc#1237019 aka CVE-2025-1181 aka PR32643\n  * bsc#1237020 aka CVE-2025-1180 aka PR32642\n  * bsc#1237021 aka CVE-2025-1179 aka PR32640\n  * bsc#1237042 aka CVE-2025-1182 aka PR32644\n  * bsc#1240870 aka CVE-2025-3198 aka PR32716\n  * bsc#1243756 aka CVE-2025-5244 aka PR32858\n  * bsc#1243760 aka CVE-2025-5245 aka PR32829\n  * bsc#1246481 aka CVE-2025-7545 aka PR33049\n  * bsc#1246486 aka CVE-2025-7546 aka PR33050\n  * bsc#1247114 aka CVE-2025-8224 aka PR32109\n  * bsc#1247117 aka CVE-2025-8225 no PR\n  * bsc#1236976 aka CVE-2025-1147 aka PR32556\n  * bsc#1250632 aka CVE-2025-11083 aka PR33457\n  * bsc#1251275 aka CVE-2025-11412 aka PR33452\n  * bsc#1251276 aka CVE-2025-11413 aka PR33456\n  * bsc#1251277 aka CVE-2025-11414 aka PR33450\n  * bsc#1251794 aka CVE-2025-11494 aka PR33499\n  * bsc#1251795 aka CVE-2025-11495 aka PR33502\n  binutils-2.43-branch.diff.gz\n","status":"published","published":"2025-12-12T15:58:29Z","modified":"2026-03-23T04:51:14.762892Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4096-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\n- Do not enable '-z gcs=implicit' on aarch64 for old codestreams.\n\nUpdate to version 2.45:\n\n  * New versioned release of libsframe.so.2\n  * s390: tools now support SFrame format 2; recognize 'z17' as CPU\n    name [bsc#1247105, jsc#IBM-1485]\n  * sframe sections are now of ELF section type SHT_GNU_SFRAME.\n  * sframe secions generated by the assembler have\n    SFRAME_F_FDE_FUNC_START_PCREL set.\n  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,\n    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,\n    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,\n    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,\n    zclsd v1.0, smrnmi v1.0;\n    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;\n    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;\n    T-Head: xtheadvdot v1.0;\n    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.\n  * Support RISC-V privileged version 1.13, profiles 20/22/23, and\n    .bfloat16 directive.\n  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,\n    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.\n    Drop support for  AVX10.2 256 bit rounding.\n  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and\n    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',\n    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',\n    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.\n  * Predefined symbols 'GAS(version)' and, on non-release builds, 'GAS(date)'\n    are now being made available.\n  * Add .errif and .warnif directives.\n  * linker:\n    - Add --image-base=\u003cADDR\u003e option to the ELF linker to behave the same\n      as -Ttext-segment for compatibility with LLD.\n    - Add support for mixed LTO and non-LTO codes in relocatable output.\n    - s390: linker generates .eh_frame and/or .sframe for linker\n      generated .plt sections by default (can be disabled\n      by --no-ld-generated-unwind-info).\n    - riscv: add new PLT formats, and GNU property merge rules for zicfiss\n      and zicfilp extensions.\n- gold is no longer included\n- Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md):\n\n  * bsc#1236632 aka CVE-2025-0840 aka PR32650\n  * bsc#1236977 aka CVE-2025-1149 aka PR32576\n  * bsc#1236978 aka CVE-2025-1148 aka PR32576\n  * bsc#1236999 aka CVE-2025-1176 aka PR32636\n  * bsc#1237000 aka CVE-2025-1153 aka PR32603\n  * bsc#1237001 aka CVE-2025-1152 aka PR32576\n  * bsc#1237003 aka CVE-2025-1151 aka PR32576\n  * bsc#1237005 aka CVE-2025-1150 aka PR32576\n  * bsc#1237018 aka CVE-2025-1178 aka PR32638\n  * bsc#1237019 aka CVE-2025-1181 aka PR32643\n  * bsc#1237020 aka CVE-2025-1180 aka PR32642\n  * bsc#1237021 aka CVE-2025-1179 aka PR32640\n  * bsc#1237042 aka CVE-2025-1182 aka PR32644\n  * bsc#1240870 aka CVE-2025-3198 aka PR32716\n  * bsc#1243756 aka CVE-2025-5244 aka PR32858\n  * bsc#1243760 aka CVE-2025-5245 aka PR32829\n  * bsc#1246481 aka CVE-2025-7545 aka PR33049\n  * bsc#1246486 aka CVE-2025-7546 aka PR33050\n  * bsc#1247114 aka CVE-2025-8224 aka PR32109\n  * bsc#1247117 aka CVE-2025-8225 no PR\n- Add these backport patches:\n  * bsc#1236976 aka CVE-2025-1147 aka PR32556\n  * bsc#1250632 aka CVE-2025-11083 aka PR33457\n  * bsc#1251275 aka CVE-2025-11412 aka PR33452\n  * bsc#1251276 aka CVE-2025-11413 aka PR33456\n  * bsc#1251277 aka CVE-2025-11414 aka PR33450\n  * bsc#1251794 aka CVE-2025-11494 aka PR33499\n  * bsc#1251795 aka CVE-2025-11495 aka PR33502\n\n- Skip PGO with %want_reproducible_builds (bsc#1040589)\n- Fix crash in assembler with -gdwarf-5\n- aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size\n- Add -std=gnu17 to move gcc15 forward, as temporary measure until\n  the binutils version can be updated [bsc#1241916].\n","status":"published","published":"2025-11-14T08:07:40Z","modified":"2026-03-23T04:51:26.82263Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}