# OPENSUSE-SU-2025:20150-1: Security update for 27 packages OPENSUSE-SU-2025:20150-1, released December 12, 2025, fixes 27 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2025-20150-1 - Platform: Linux - Released: Dec 12, 2025 - Priority: High (Closes CVE-2025-0840, high severity) - CVEs: 27, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2025:20150-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [binutils](https://patchblox.com/security/data/product/linux/binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | opensuse-leap 16.0 | 7.5.0-160000.2.3 | | [cross-aarch64-binutils](https://patchblox.com/security/data/product/linux/cross-aarch64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-arm-binutils](https://patchblox.com/security/data/product/linux/cross-arm-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-avr-binutils](https://patchblox.com/security/data/product/linux/cross-avr-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-bpf-binutils](https://patchblox.com/security/data/product/linux/cross-bpf-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-epiphany-binutils](https://patchblox.com/security/data/product/linux/cross-epiphany-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-hppa-binutils](https://patchblox.com/security/data/product/linux/cross-hppa-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-hppa64-binutils](https://patchblox.com/security/data/product/linux/cross-hppa64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-i386-binutils](https://patchblox.com/security/data/product/linux/cross-i386-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-ia64-binutils](https://patchblox.com/security/data/product/linux/cross-ia64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-loongarch64-binutils](https://patchblox.com/security/data/product/linux/cross-loongarch64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-m68k-binutils](https://patchblox.com/security/data/product/linux/cross-m68k-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-mips-binutils](https://patchblox.com/security/data/product/linux/cross-mips-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-ppc-binutils](https://patchblox.com/security/data/product/linux/cross-ppc-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-ppc64-binutils](https://patchblox.com/security/data/product/linux/cross-ppc64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-ppc64le-binutils](https://patchblox.com/security/data/product/linux/cross-ppc64le-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-pru-binutils](https://patchblox.com/security/data/product/linux/cross-pru-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-riscv64-binutils](https://patchblox.com/security/data/product/linux/cross-riscv64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-rx-binutils](https://patchblox.com/security/data/product/linux/cross-rx-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-s390-binutils](https://patchblox.com/security/data/product/linux/cross-s390-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-s390x-binutils](https://patchblox.com/security/data/product/linux/cross-s390x-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-sparc-binutils](https://patchblox.com/security/data/product/linux/cross-sparc-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-sparc64-binutils](https://patchblox.com/security/data/product/linux/cross-sparc64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-spu-binutils](https://patchblox.com/security/data/product/linux/cross-spu-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-x86_64-binutils](https://patchblox.com/security/data/product/linux/cross-x86-64-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | | [cross-xtensa-binutils](https://patchblox.com/security/data/product/linux/cross-xtensa-binutils.md) | opensuse-leap 16.0 | 2.45-160000.1.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-0840](https://patchblox.com/security/data/cve/CVE-2025-0840.md) | High | binutils: A vulnerability, which was classified as problematic, was found in GNUBinutils up to 2.43 | 7.5 | 0.0076 | | | [CVE-2025-1179](https://patchblox.com/security/data/cve/CVE-2025-1179.md) | High | binutils: A vulnerability was found in GNU Binutils 2.43 | 7.5 | 0.0057 | | | [CVE-2025-7545](https://patchblox.com/security/data/cve/CVE-2025-7545.md) | High | GNU Binutils objcopy.c copy_section heap-based overflow | 7.8 | 0.0030 | | | [CVE-2025-5245](https://patchblox.com/security/data/cve/CVE-2025-5245.md) | High | GNU Binutils objdump debug.c debug_type_samep memory corruption | 7.8 | 0.0030 | | | [CVE-2025-5244](https://patchblox.com/security/data/cve/CVE-2025-5244.md) | High | GNU Binutils ld elflink.c elf_gc_sweep memory corruption | 7.8 | 0.0030 | | | [CVE-2025-11083](https://patchblox.com/security/data/cve/CVE-2025-11083.md) | High | binutils: A vulnerability has been found in GNU Binutils 2.45 | 7.8 | 0.0026 | | | [CVE-2025-7546](https://patchblox.com/security/data/cve/CVE-2025-7546.md) | High | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write | 7.8 | 0.0021 | | | [CVE-2025-1153](https://patchblox.com/security/data/cve/CVE-2025-1153.md) | Routine | binutils: A vulnerability classified as problematic was found in GNU Binutils2.43/2.44 | 5.9 | 0.0136 | | | [CVE-2025-1178](https://patchblox.com/security/data/cve/CVE-2025-1178.md) | Routine | binutils: A vulnerability was found in GNU Binutils 2.43 | n/a | 0.0080 | | | [CVE-2025-1181](https://patchblox.com/security/data/cve/CVE-2025-1181.md) | Routine | binutils: A vulnerability classified as critical was found in GNU Binutils 2.43 | n/a | 0.0071 | | | [CVE-2025-1180](https://patchblox.com/security/data/cve/CVE-2025-1180.md) | Routine | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | 3.1 | 0.0070 | | | [CVE-2025-1176](https://patchblox.com/security/data/cve/CVE-2025-1176.md) | Routine | binutils: A vulnerability was found in GNU Binutils 2.43 and classified as critical.This issue affects the function _bfd_elf_gc... | 5.0 | 0.0067 | | | [CVE-2025-1147](https://patchblox.com/security/data/cve/CVE-2025-1147.md) | Routine | binutils: A vulnerability has been found in GNU Binutils 2.43 and classified asproblematic | 5.3 | 0.0067 | | | [CVE-2025-1148](https://patchblox.com/security/data/cve/CVE-2025-1148.md) | Routine | binutils: A vulnerability was found in GNU Binutils 2.43 and classified asproblematic | 3.1 | 0.0064 | | | [CVE-2025-1152](https://patchblox.com/security/data/cve/CVE-2025-1152.md) | Routine | binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream... | 3.7 | 0.0061 | | | [CVE-2025-1150](https://patchblox.com/security/data/cve/CVE-2025-1150.md) | Routine | GNU Binutils ld libbfd.c bfd_malloc memory leak | 3.1 | 0.0061 | | | [CVE-2025-1151](https://patchblox.com/security/data/cve/CVE-2025-1151.md) | Routine | binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream... | n/a | 0.0061 | | | [CVE-2025-1182](https://patchblox.com/security/data/cve/CVE-2025-1182.md) | Routine | binutils: A vulnerability, which was classified as critical, was found in GNUBinutils 2.43 | n/a | 0.0059 | | | [CVE-2025-1149](https://patchblox.com/security/data/cve/CVE-2025-1149.md) | Routine | binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream... | 3.1 | 0.0058 | | | [CVE-2025-3198](https://patchblox.com/security/data/cve/CVE-2025-3198.md) | Routine | binutils-ia64-linux-gnu: A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic | 5.5 | 0.0029 | | | [CVE-2025-8224](https://patchblox.com/security/data/cve/CVE-2025-8224.md) | Routine | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference | 5.5 | 0.0028 | | | [CVE-2025-8225](https://patchblox.com/security/data/cve/CVE-2025-8225.md) | Routine | GNU Binutils DWARF Section dwarf.c process_debug_info memory leak | 4.4 | 0.0027 | | | [CVE-2025-11495](https://patchblox.com/security/data/cve/CVE-2025-11495.md) | Routine | GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow | 5.5 | 0.0024 | | | [CVE-2025-11413](https://patchblox.com/security/data/cve/CVE-2025-11413.md) | Routine | binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream... | 5.5 | 0.0022 | | | [CVE-2025-11494](https://patchblox.com/security/data/cve/CVE-2025-11494.md) | Routine | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds | 5.5 | 0.0022 | | | [CVE-2025-11412](https://patchblox.com/security/data/cve/CVE-2025-11412.md) | Routine | GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds | 5.5 | 0.0021 | | | [CVE-2025-11414](https://patchblox.com/security/data/cve/CVE-2025-11414.md) | Routine | GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds | 5.5 | 0.0021 | | --- Data as of 2026-11-10T01:44:33Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.