Linux · openSUSE Leap · Security advisory · December 12, 2025

OPENSUSE-SU-2025:20150-1: Security update for 27 packages

OPENSUSE-SU-2025:20150-1, released December 12, 2025, fixes 27 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
27
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0136
71st percentile

Priority of the 27 CVEs

Patch now 0 Urgent 0 High 7 Routine 20

Fixed package versions

ProductReleaseFixed in
binutilsopensuse-leap 16.02.45-160000.1.1
bpftoolopensuse-leap 16.07.5.0-160000.2.3
cross-aarch64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-arm-binutilsopensuse-leap 16.02.45-160000.1.1
cross-avr-binutilsopensuse-leap 16.02.45-160000.1.1
cross-bpf-binutilsopensuse-leap 16.02.45-160000.1.1
cross-epiphany-binutilsopensuse-leap 16.02.45-160000.1.1
cross-hppa-binutilsopensuse-leap 16.02.45-160000.1.1
cross-hppa64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-i386-binutilsopensuse-leap 16.02.45-160000.1.1
cross-ia64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-loongarch64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-m68k-binutilsopensuse-leap 16.02.45-160000.1.1
cross-mips-binutilsopensuse-leap 16.02.45-160000.1.1
cross-ppc-binutilsopensuse-leap 16.02.45-160000.1.1
cross-ppc64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-ppc64le-binutilsopensuse-leap 16.02.45-160000.1.1
cross-pru-binutilsopensuse-leap 16.02.45-160000.1.1
cross-riscv64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-rx-binutilsopensuse-leap 16.02.45-160000.1.1
cross-s390-binutilsopensuse-leap 16.02.45-160000.1.1
cross-s390x-binutilsopensuse-leap 16.02.45-160000.1.1
cross-sparc-binutilsopensuse-leap 16.02.45-160000.1.1
cross-sparc64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-spu-binutilsopensuse-leap 16.02.45-160000.1.1
cross-x86_64-binutilsopensuse-leap 16.02.45-160000.1.1
cross-xtensa-binutilsopensuse-leap 16.02.45-160000.1.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-0840 binutils: A vulnerability, which was classified as problematic, was found in GNUBinutils up to 2.437.5 0.0076 None reported
High CVE-2025-1179 binutils: A vulnerability was found in GNU Binutils 2.437.5 0.0057 None reported
High CVE-2025-7545 GNU Binutils objcopy.c copy_section heap-based overflow7.8 0.0030 None reported
High CVE-2025-5245 GNU Binutils objdump debug.c debug_type_samep memory corruption7.8 0.0030 None reported
High CVE-2025-5244 GNU Binutils ld elflink.c elf_gc_sweep memory corruption7.8 0.0030 None reported
High CVE-2025-11083 binutils: A vulnerability has been found in GNU Binutils 2.457.8 0.0026 None reported
High CVE-2025-7546 GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write7.8 0.0021 None reported
Routine CVE-2025-1153 binutils: A vulnerability classified as problematic was found in GNU Binutils2.43/2.445.9 0.0136 None reported
Routine CVE-2025-1178 binutils: A vulnerability was found in GNU Binutils 2.43n/a 0.0080 None reported
Routine CVE-2025-1181 binutils: A vulnerability classified as critical was found in GNU Binutils 2.43n/a 0.0071 None reported
Routine CVE-2025-1180 GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption3.1 0.0070 None reported
Routine CVE-2025-1176 binutils: A vulnerability was found in GNU Binutils 2.43 and classified as critical.This issue affects the function _bfd_elf_gc...5.0 0.0067 None reported
Routine CVE-2025-1147 binutils: A vulnerability has been found in GNU Binutils 2.43 and classified asproblematic5.3 0.0067 None reported
Routine CVE-2025-1148 binutils: A vulnerability was found in GNU Binutils 2.43 and classified asproblematic3.1 0.0064 None reported
Routine CVE-2025-1152 binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream...3.7 0.0061 None reported
Routine CVE-2025-1150 GNU Binutils ld libbfd.c bfd_malloc memory leak3.1 0.0061 None reported
Routine CVE-2025-1151 binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream...n/a 0.0061 None reported
Routine CVE-2025-1182 binutils: A vulnerability, which was classified as critical, was found in GNUBinutils 2.43n/a 0.0059 None reported
Routine CVE-2025-1149 binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream...3.1 0.0058 None reported
Routine CVE-2025-3198 binutils-ia64-linux-gnu: A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic5.5 0.0029 None reported
Routine CVE-2025-8224 GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference5.5 0.0028 None reported
Routine CVE-2025-8225 GNU Binutils DWARF Section dwarf.c process_debug_info memory leak4.4 0.0027 None reported
Routine CVE-2025-11495 GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow5.5 0.0024 None reported
Routine CVE-2025-11413 binutils: This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestream...5.5 0.0022 None reported
Routine CVE-2025-11494 GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds5.5 0.0022 None reported
Showing 1 to 25 of 27 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.