OPENSUSE-SU-2026:11932-1

Vulnerability from csaf_opensuse - Published: 2026-09-30 00:00 - Updated: 2026-10-01 10:22
Summary
binutils-2.47-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: binutils-2.47-1.1 on GA media
Description of the patch: These are all security issues fixed in the binutils-2.47-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11932
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64 —
Vendor Fix
Threats
Impact low
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact low
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact low
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact low
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact low
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact low
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact important
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact moderate
Affected products
Recommended 28 products, the same list as for CVE-2025-11082
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2025-11082/ self
https://www.suse.com/security/cve/CVE-2025-11839/ self
https://www.suse.com/security/cve/CVE-2025-11840/ self
https://www.suse.com/security/cve/CVE-2025-69644/ self
https://www.suse.com/security/cve/CVE-2025-69645/ self
https://www.suse.com/security/cve/CVE-2025-69646/ self
https://www.suse.com/security/cve/CVE-2025-69647/ self
https://www.suse.com/security/cve/CVE-2025-69648/ self
https://www.suse.com/security/cve/CVE-2025-69649/ self
https://www.suse.com/security/cve/CVE-2025-69652/ self
https://www.suse.com/security/cve/CVE-2026-15003/ self
https://www.suse.com/security/cve/CVE-2026-18220/ self
https://www.suse.com/security/cve/CVE-2026-3441/ self
https://www.suse.com/security/cve/CVE-2026-3442/ self
https://www.suse.com/security/cve/CVE-2026-4647/ self
https://www.suse.com/security/cve/CVE-2026-6846/ self
https://www.suse.com/security/cve/CVE-2025-11082 external
https://bugzilla.suse.com/1254442 external
https://www.suse.com/security/cve/CVE-2025-11839 external
https://bugzilla.suse.com/1252237 external
https://www.suse.com/security/cve/CVE-2025-11840 external
https://bugzilla.suse.com/1252238 external
https://www.suse.com/security/cve/CVE-2025-69644 external
https://bugzilla.suse.com/1259322 external
https://www.suse.com/security/cve/CVE-2025-69645 external
https://bugzilla.suse.com/1259323 external
https://www.suse.com/security/cve/CVE-2025-69646 external
https://bugzilla.suse.com/1259324 external
https://www.suse.com/security/cve/CVE-2025-69647 external
https://bugzilla.suse.com/1259421 external
https://www.suse.com/security/cve/CVE-2025-69648 external
https://bugzilla.suse.com/1259422 external
https://www.suse.com/security/cve/CVE-2025-69649 external
https://bugzilla.suse.com/1259394 external
https://www.suse.com/security/cve/CVE-2025-69652 external
https://bugzilla.suse.com/1259397 external
https://www.suse.com/security/cve/CVE-2026-15003 external
https://bugzilla.suse.com/1282138 external
https://www.suse.com/security/cve/CVE-2026-18220 external
https://bugzilla.suse.com/1274433 external
https://www.suse.com/security/cve/CVE-2026-3441 external
https://bugzilla.suse.com/1259077 external
https://www.suse.com/security/cve/CVE-2026-3442 external
https://bugzilla.suse.com/1259078 external
https://www.suse.com/security/cve/CVE-2026-4647 external
https://bugzilla.suse.com/1260338 external
https://www.suse.com/security/cve/CVE-2026-6846 external
https://bugzilla.suse.com/1262564 external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "binutils-2.47-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the binutils-2.47-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11932",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11932-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11082 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11839 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11839/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-11840 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-11840/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-69644 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-69644/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-69645 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-69645/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-69646 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-69646/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-69647 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-69647/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-69648 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-69648/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-69649 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-69649/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-69652 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-69652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15003 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15003/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-18220 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-18220/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-3441 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-3441/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-3442 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-3442/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4647 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4647/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6846 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6846/"
      }
    ],
    "title": "binutils-2.47-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-10-01T10:22:57Z",
      "generator": {
        "date": "2026-09-30T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11932-1",
      "initial_release_date": "2026-09-30T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-09-30T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-10-01T10:22:57Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "binutils-0:2.47-1.1.aarch64",
                "product": {
                  "name": "binutils-0:2.47-1.1.aarch64",
                  "product_id": "binutils-0:2.47-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils@2.47-1.1?arch=aarch64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-0:2.47-1.1.aarch64",
                "product": {
                  "name": "binutils-devel-0:2.47-1.1.aarch64",
                  "product_id": "binutils-devel-0:2.47-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel@2.47-1.1?arch=aarch64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-32bit-0:2.47-1.1.aarch64",
                "product": {
                  "name": "binutils-devel-32bit-0:2.47-1.1.aarch64",
                  "product_id": "binutils-devel-32bit-0:2.47-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-1.1?arch=aarch64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gprofng-0:2.47-1.1.aarch64",
                "product": {
                  "name": "gprofng-0:2.47-1.1.aarch64",
                  "product_id": "gprofng-0:2.47-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gprofng@2.47-1.1?arch=aarch64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf-nobfd0-0:2.47-1.1.aarch64",
                "product": {
                  "name": "libctf-nobfd0-0:2.47-1.1.aarch64",
                  "product_id": "libctf-nobfd0-0:2.47-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf-nobfd0@2.47-1.1?arch=aarch64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf0-0:2.47-1.1.aarch64",
                "product": {
                  "name": "libctf0-0:2.47-1.1.aarch64",
                  "product_id": "libctf0-0:2.47-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf0@2.47-1.1?arch=aarch64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsframe3-0:2.47-1.1.aarch64",
                "product": {
                  "name": "libsframe3-0:2.47-1.1.aarch64",
                  "product_id": "libsframe3-0:2.47-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libsframe3@2.47-1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "binutils-0:2.47-1.1.ppc64le",
                "product": {
                  "name": "binutils-0:2.47-1.1.ppc64le",
                  "product_id": "binutils-0:2.47-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils@2.47-1.1?arch=ppc64le\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-0:2.47-1.1.ppc64le",
                "product": {
                  "name": "binutils-devel-0:2.47-1.1.ppc64le",
                  "product_id": "binutils-devel-0:2.47-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel@2.47-1.1?arch=ppc64le\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-32bit-0:2.47-1.1.ppc64le",
                "product": {
                  "name": "binutils-devel-32bit-0:2.47-1.1.ppc64le",
                  "product_id": "binutils-devel-32bit-0:2.47-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-1.1?arch=ppc64le\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gprofng-0:2.47-1.1.ppc64le",
                "product": {
                  "name": "gprofng-0:2.47-1.1.ppc64le",
                  "product_id": "gprofng-0:2.47-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gprofng@2.47-1.1?arch=ppc64le\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf-nobfd0-0:2.47-1.1.ppc64le",
                "product": {
                  "name": "libctf-nobfd0-0:2.47-1.1.ppc64le",
                  "product_id": "libctf-nobfd0-0:2.47-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf-nobfd0@2.47-1.1?arch=ppc64le\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf0-0:2.47-1.1.ppc64le",
                "product": {
                  "name": "libctf0-0:2.47-1.1.ppc64le",
                  "product_id": "libctf0-0:2.47-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf0@2.47-1.1?arch=ppc64le\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsframe3-0:2.47-1.1.ppc64le",
                "product": {
                  "name": "libsframe3-0:2.47-1.1.ppc64le",
                  "product_id": "libsframe3-0:2.47-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libsframe3@2.47-1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "binutils-0:2.47-1.1.s390x",
                "product": {
                  "name": "binutils-0:2.47-1.1.s390x",
                  "product_id": "binutils-0:2.47-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils@2.47-1.1?arch=s390x\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-0:2.47-1.1.s390x",
                "product": {
                  "name": "binutils-devel-0:2.47-1.1.s390x",
                  "product_id": "binutils-devel-0:2.47-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel@2.47-1.1?arch=s390x\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-32bit-0:2.47-1.1.s390x",
                "product": {
                  "name": "binutils-devel-32bit-0:2.47-1.1.s390x",
                  "product_id": "binutils-devel-32bit-0:2.47-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-1.1?arch=s390x\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gprofng-0:2.47-1.1.s390x",
                "product": {
                  "name": "gprofng-0:2.47-1.1.s390x",
                  "product_id": "gprofng-0:2.47-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gprofng@2.47-1.1?arch=s390x\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf-nobfd0-0:2.47-1.1.s390x",
                "product": {
                  "name": "libctf-nobfd0-0:2.47-1.1.s390x",
                  "product_id": "libctf-nobfd0-0:2.47-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf-nobfd0@2.47-1.1?arch=s390x\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf0-0:2.47-1.1.s390x",
                "product": {
                  "name": "libctf0-0:2.47-1.1.s390x",
                  "product_id": "libctf0-0:2.47-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf0@2.47-1.1?arch=s390x\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsframe3-0:2.47-1.1.s390x",
                "product": {
                  "name": "libsframe3-0:2.47-1.1.s390x",
                  "product_id": "libsframe3-0:2.47-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libsframe3@2.47-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "binutils-0:2.47-1.1.x86_64",
                "product": {
                  "name": "binutils-0:2.47-1.1.x86_64",
                  "product_id": "binutils-0:2.47-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils@2.47-1.1?arch=x86_64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-0:2.47-1.1.x86_64",
                "product": {
                  "name": "binutils-devel-0:2.47-1.1.x86_64",
                  "product_id": "binutils-devel-0:2.47-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel@2.47-1.1?arch=x86_64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "binutils-devel-32bit-0:2.47-1.1.x86_64",
                "product": {
                  "name": "binutils-devel-32bit-0:2.47-1.1.x86_64",
                  "product_id": "binutils-devel-32bit-0:2.47-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-1.1?arch=x86_64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gprofng-0:2.47-1.1.x86_64",
                "product": {
                  "name": "gprofng-0:2.47-1.1.x86_64",
                  "product_id": "gprofng-0:2.47-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/gprofng@2.47-1.1?arch=x86_64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf-nobfd0-0:2.47-1.1.x86_64",
                "product": {
                  "name": "libctf-nobfd0-0:2.47-1.1.x86_64",
                  "product_id": "libctf-nobfd0-0:2.47-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf-nobfd0@2.47-1.1?arch=x86_64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libctf0-0:2.47-1.1.x86_64",
                "product": {
                  "name": "libctf0-0:2.47-1.1.x86_64",
                  "product_id": "libctf0-0:2.47-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libctf0@2.47-1.1?arch=x86_64\u0026upstream=binutils-0:2.47-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libsframe3-0:2.47-1.1.x86_64",
                "product": {
                  "name": "libsframe3-0:2.47-1.1.x86_64",
                  "product_id": "libsframe3-0:2.47-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libsframe3@2.47-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-0:2.47-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64"
        },
        "product_reference": "binutils-0:2.47-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-0:2.47-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le"
        },
        "product_reference": "binutils-0:2.47-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-0:2.47-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x"
        },
        "product_reference": "binutils-0:2.47-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-0:2.47-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64"
        },
        "product_reference": "binutils-0:2.47-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-0:2.47-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64"
        },
        "product_reference": "binutils-devel-0:2.47-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-0:2.47-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le"
        },
        "product_reference": "binutils-devel-0:2.47-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-0:2.47-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x"
        },
        "product_reference": "binutils-devel-0:2.47-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-0:2.47-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64"
        },
        "product_reference": "binutils-devel-0:2.47-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-32bit-0:2.47-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64"
        },
        "product_reference": "binutils-devel-32bit-0:2.47-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-32bit-0:2.47-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le"
        },
        "product_reference": "binutils-devel-32bit-0:2.47-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-32bit-0:2.47-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x"
        },
        "product_reference": "binutils-devel-32bit-0:2.47-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "binutils-devel-32bit-0:2.47-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64"
        },
        "product_reference": "binutils-devel-32bit-0:2.47-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gprofng-0:2.47-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64"
        },
        "product_reference": "gprofng-0:2.47-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gprofng-0:2.47-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le"
        },
        "product_reference": "gprofng-0:2.47-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gprofng-0:2.47-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x"
        },
        "product_reference": "gprofng-0:2.47-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gprofng-0:2.47-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64"
        },
        "product_reference": "gprofng-0:2.47-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf-nobfd0-0:2.47-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64"
        },
        "product_reference": "libctf-nobfd0-0:2.47-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf-nobfd0-0:2.47-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le"
        },
        "product_reference": "libctf-nobfd0-0:2.47-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf-nobfd0-0:2.47-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x"
        },
        "product_reference": "libctf-nobfd0-0:2.47-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf-nobfd0-0:2.47-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64"
        },
        "product_reference": "libctf-nobfd0-0:2.47-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf0-0:2.47-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64"
        },
        "product_reference": "libctf0-0:2.47-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf0-0:2.47-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le"
        },
        "product_reference": "libctf0-0:2.47-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf0-0:2.47-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x"
        },
        "product_reference": "libctf0-0:2.47-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libctf0-0:2.47-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64"
        },
        "product_reference": "libctf0-0:2.47-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsframe3-0:2.47-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64"
        },
        "product_reference": "libsframe3-0:2.47-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsframe3-0:2.47-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le"
        },
        "product_reference": "libsframe3-0:2.47-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsframe3-0:2.47-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x"
        },
        "product_reference": "libsframe3-0:2.47-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsframe3-0:2.47-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        },
        "product_reference": "libsframe3-0:2.47-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-11082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with \"[f]ixed for 2.46\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11082",
          "url": "https://www.suse.com/security/cve/CVE-2025-11082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254442 for CVE-2025-11082",
          "url": "https://bugzilla.suse.com/1254442"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-11082"
    },
    {
      "cve": "CVE-2025-11839",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11839"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11839",
          "url": "https://www.suse.com/security/cve/CVE-2025-11839"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1252237 for CVE-2025-11839",
          "url": "https://bugzilla.suse.com/1252237"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-11839"
    },
    {
      "cve": "CVE-2025-11840",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-11840"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-11840",
          "url": "https://www.suse.com/security/cve/CVE-2025-11840"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1252238 for CVE-2025-11840",
          "url": "https://bugzilla.suse.com/1252238"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-11840"
    },
    {
      "cve": "CVE-2025-69644",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-69644"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-69644",
          "url": "https://www.suse.com/security/cve/CVE-2025-69644"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259322 for CVE-2025-69644",
          "url": "https://bugzilla.suse.com/1259322"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-69644"
    },
    {
      "cve": "CVE-2025-69645",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-69645"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-69645",
          "url": "https://www.suse.com/security/cve/CVE-2025-69645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259323 for CVE-2025-69645",
          "url": "https://bugzilla.suse.com/1259323"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-69645"
    },
    {
      "cve": "CVE-2025-69646",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-69646"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-69646",
          "url": "https://www.suse.com/security/cve/CVE-2025-69646"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259324 for CVE-2025-69646",
          "url": "https://bugzilla.suse.com/1259324"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-69646"
    },
    {
      "cve": "CVE-2025-69647",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-69647"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-69647",
          "url": "https://www.suse.com/security/cve/CVE-2025-69647"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259421 for CVE-2025-69647",
          "url": "https://bugzilla.suse.com/1259421"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-69647"
    },
    {
      "cve": "CVE-2025-69648",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-69648"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-69648",
          "url": "https://www.suse.com/security/cve/CVE-2025-69648"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259422 for CVE-2025-69648",
          "url": "https://bugzilla.suse.com/1259422"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-69648"
    },
    {
      "cve": "CVE-2025-69649",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-69649"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-69649",
          "url": "https://www.suse.com/security/cve/CVE-2025-69649"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259394 for CVE-2025-69649",
          "url": "https://bugzilla.suse.com/1259394"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-69649"
    },
    {
      "cve": "CVE-2025-69652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-69652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-69652",
          "url": "https://www.suse.com/security/cve/CVE-2025-69652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259397 for CVE-2025-69652",
          "url": "https://bugzilla.suse.com/1259397"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-69652"
    },
    {
      "cve": "CVE-2026-15003",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15003"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15003",
          "url": "https://www.suse.com/security/cve/CVE-2026-15003"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1282138 for CVE-2026-15003",
          "url": "https://bugzilla.suse.com/1282138"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-15003"
    },
    {
      "cve": "CVE-2026-18220",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-18220"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds write vulnerability was found in the BFD library\u0027s DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values (via ELF32_R_TYPE(r_info)) before indexing into the dlx_elf_howto_table[] array. The DLX relocation type number space is non-contiguous (basic types 0-6, extended types at 0x10000+), but the default case in the switch statement allows arbitrary index values to reach the array access.\n\nA specially crafted ELF/DLX object file can trigger this out-of-bounds write when processed by any BFD-consuming tool (objdump, readelf, strip, ld, nm, objcopy). The vulnerability has been demonstrated to achieve arbitrary code execution via a File Stream Oriented Programming (FSOP) attack against glibc FILE structures (stderr), redirecting control flow to system().\n\nAttack scenarios include CI/CD pipelines performing automated binary analysis, developer workstations running objdump/readelf on untrusted binaries, automated security scanning or malware analysis tools invoking binutils, and package build systems processing third-party code.\n\nNote: This vulnerability is only exploitable when binutils is built with the DLX backend enabled (typically via --enable-targets=all).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-18220",
          "url": "https://www.suse.com/security/cve/CVE-2026-18220"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274433 for CVE-2026-18220",
          "url": "https://bugzilla.suse.com/1274433"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-18220"
    },
    {
      "cve": "CVE-2026-3441",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-3441"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-3441",
          "url": "https://www.suse.com/security/cve/CVE-2026-3441"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259077 for CVE-2026-3441",
          "url": "https://bugzilla.suse.com/1259077"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-3441"
    },
    {
      "cve": "CVE-2026-3442",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-3442"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-3442",
          "url": "https://www.suse.com/security/cve/CVE-2026-3442"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259078 for CVE-2026-3442",
          "url": "https://bugzilla.suse.com/1259078"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-3442"
    },
    {
      "cve": "CVE-2026-4647",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4647"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4647",
          "url": "https://www.suse.com/security/cve/CVE-2026-4647"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260338 for CVE-2026-4647",
          "url": "https://bugzilla.suse.com/1260338"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-4647"
    },
    {
      "cve": "CVE-2026-6846",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6846"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
          "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6846",
          "url": "https://www.suse.com/security/cve/CVE-2026-6846"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262564 for CVE-2026-6846",
          "url": "https://bugzilla.suse.com/1262564"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:gprofng-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libctf0-0:2.47-1.1.x86_64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.aarch64",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.ppc64le",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.s390x",
            "openSUSE Tumbleweed:libsframe3-0:2.47-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-30T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-6846"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…