Linux · SUSE Linux Enterprise · Security advisory · November 14, 2025
SUSE-SU-2025:4096-1: Security update for 27 packages
SUSE-SU-2025:4096-1, released November 14, 2025, fixes 27 CVEs across 27 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
27
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0136
72nd percentile
Priority of the 27 CVEs
Patch now 0
Urgent 0
High 7
Routine 20
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| binutils | sles 15.6 | 2.45-150100.7.57.1 |
| binutils | sles 15.7 | 2.45-150100.7.57.1 |
| cross-aarch64-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-arm-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-avr-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-bpf-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-epiphany-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-hppa-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-hppa64-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-i386-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-ia64-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-m68k-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-mips-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-ppc-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-ppc64-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-ppc64le-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-pru-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-riscv64-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-rx-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-s390-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-s390x-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-sparc-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-sparc64-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-spu-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-x86_64-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| cross-xtensa-binutils | opensuse-leap 15.6 | 2.45-150100.7.57.1 |
| openucx | opensuse-leap 15.6 | 1.15.0-150600.3.5.2 |
| openucx | sles 15.6 | 1.15.0-150600.3.5.2 |
| openucx | sles 15.7 | 1.17.0-150700.4.2.7 |
| perf | opensuse-leap 15.6 | 6.4.0.git33229.a3afe13a7f-150600.3.17.1 |
| perf | sles 15.6 | 6.4.0.git33229.a3afe13a7f-150600.3.17.1 |
| perf | sles 15.7 | 6.4.0.git54263.0aad576b1c-150700.3.2.2 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2025-0840 | binutils: bsc#1236632 aka aka PR32650 | 7.5 | 0.0076 | None reported |
| High | CVE-2025-1179 | binutils: bsc#1237021 aka aka PR32640 | 7.5 | 0.0057 | None reported |
| High | CVE-2025-7545 | GNU Binutils objcopy.c copy_section heap-based overflow | 7.8 | 0.0030 | None reported |
| High | CVE-2025-5245 | GNU Binutils objdump debug.c debug_type_samep memory corruption | 7.8 | 0.0030 | None reported |
| High | CVE-2025-5244 | GNU Binutils ld elflink.c elf_gc_sweep memory corruption | 7.8 | 0.0030 | None reported |
| High | CVE-2025-11083 | binutils: bsc#1250632 aka aka PR33457 | 7.8 | 0.0026 | None reported |
| High | CVE-2025-7546 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write | 7.8 | 0.0021 | None reported |
| Routine | CVE-2025-1153 | binutils: bsc#1237000 aka aka PR32603 | 5.9 | 0.0136 | None reported |
| Routine | CVE-2025-1178 | binutils: bsc#1237018 aka aka PR32638 | n/a | 0.0080 | None reported |
| Routine | CVE-2025-1181 | binutils: bsc#1237019 aka aka PR32643 | n/a | 0.0071 | None reported |
| Routine | CVE-2025-1180 | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | 3.1 | 0.0070 | None reported |
| Routine | CVE-2025-1176 | binutils: bsc#1236999 aka aka PR32636 | 5.0 | 0.0067 | None reported |
| Routine | CVE-2025-1147 | binutils: bsc#1236976 aka aka PR32556 | 5.3 | 0.0067 | None reported |
| Routine | CVE-2025-1148 | binutils: bsc#1236978 aka aka PR32576 | 3.1 | 0.0064 | None reported |
| Routine | CVE-2025-1152 | binutils: bsc#1237001 aka aka PR32576 | 3.7 | 0.0061 | None reported |
| Routine | CVE-2025-1150 | GNU Binutils ld libbfd.c bfd_malloc memory leak | 3.1 | 0.0061 | None reported |
| Routine | CVE-2025-1151 | binutils: bsc#1237003 aka aka PR32576 | n/a | 0.0061 | None reported |
| Routine | CVE-2025-1182 | binutils: bsc#1237042 aka aka PR32644 | n/a | 0.0059 | None reported |
| Routine | CVE-2025-1149 | binutils: bsc#1236977 aka aka PR32576 | 3.1 | 0.0058 | None reported |
| Routine | CVE-2025-3198 | binutils: bsc#1240870 aka aka PR32716 | 5.5 | 0.0029 | None reported |
| Routine | CVE-2025-8224 | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference | 5.5 | 0.0028 | None reported |
| Routine | CVE-2025-8225 | GNU Binutils DWARF Section dwarf.c process_debug_info memory leak | 4.4 | 0.0027 | None reported |
| Routine | CVE-2025-11495 | GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow | 5.5 | 0.0024 | None reported |
| Routine | CVE-2025-11413 | binutils: bsc#1251276 aka aka PR33456 | 5.5 | 0.0022 | None reported |
| Routine | CVE-2025-11494 | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds | 5.5 | 0.0022 | None reported |
Showing 1 to 25 of 27
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.