SUSE-SU-2025:21197-1

Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 (a problem related to LTO vs fortran COMMON blocks).
Do not enable '-z gcs=implicit' on aarch64 for old codestreams.

Update to version 2.45:

New versioned release of libsframe.so.2
s390: tools now support SFrame format 2; recognize "z17" as CPU name [bsc#1247105, jsc#IBM-1485]
sframe sections are now of ELF section type SHTGNUSFRAME.
sframe secions generated by the assembler have SFRAMEFFDEFUNCSTART_PCREL set.
riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0, Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0, ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0, sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0, zclsd v1.0, smrnmi v1.0; vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0; SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0; T-Head: xtheadvdot v1.0; MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
Support RISC-V privileged version 1.13, profiles 20/22/23, and .bfloat16 directive.
x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS, AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX. Drop support for AVX10.2 256 bit rounding.
arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui', '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2', '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)" are now being made available.
Add .errif and .warnif directives.
linker:
- Add --image-base=<ADDR> option to the ELF linker to behave the same as -Ttext-segment for compatibility with LLD.
- Add support for mixed LTO and non-LTO codes in relocatable output.
- s390: linker generates .eh_frame and/or .sframe for linker generated .plt sections by default (can be disabled by --no-ld-generated-unwind-info).
- riscv: add new PLT formats, and GNU property merge rules for zicfiss and zicfilp extensions.
  - gold is no longer included
  - Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md):
bsc#1236632 aka CVE-2025-0840 aka PR32560
bsc#1236977 aka CVE-2025-1149 aka PR32576
bsc#1236978 aka CVE-2025-1148 aka PR32576
bsc#1236999 aka CVE-2025-1176 aka PR32636
bsc#1237000 aka CVE-2025-1153 aka PR32603
bsc#1237001 aka CVE-2025-1152 aka PR32576
bsc#1237003 aka CVE-2025-1151 aka PR32576
bsc#1237005 aka CVE-2025-1150 aka PR32576
bsc#1237018 aka CVE-2025-1178 aka PR32638
bsc#1237019 aka CVE-2025-1181 aka PR32643
bsc#1237020 aka CVE-2025-1180 aka PR32642
bsc#1237021 aka CVE-2025-1179 aka PR32640
bsc#1237042 aka CVE-2025-1182 aka PR32644
bsc#1240870 aka CVE-2025-3198 aka PR32716
bsc#1243756 aka CVE-2025-5244 aka PR32858
bsc#1243760 aka CVE-2025-5245 aka PR32829
bsc#1246481 aka CVE-2025-7545 aka PR33049
bsc#1246486 aka CVE-2025-7546 aka PR33050
bsc#1247114 aka CVE-2025-8224 aka PR32109
bsc#1247117 aka CVE-2025-8225 no PR
bsc#1236976 aka CVE-2025-1147 aka PR32556
bsc#1250632 aka CVE-2025-11083 aka PR33457
bsc#1251275 aka CVE-2025-11412 aka PR33452
bsc#1251276 aka CVE-2025-11413 aka PR33456
bsc#1251277 aka CVE-2025-11414 aka PR33450
bsc#1251794 aka CVE-2025-11494 aka PR33499
bsc#1251795 aka CVE-2025-11495 aka PR33502 binutils-2.43-branch.diff.gz

References

Affected packages

SUSE:Linux Micro 6.2 / binutils

Package

Name: binutils
Purl: pkg:rpm/suse/binutils&distro=SUSE%20Linux%20Micro%206.2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.45-160000.1.1

Ecosystem specific

{
    "binaries": [
        {
            "libctf-nobfd0": "2.45-160000.1.1",
            "libctf0": "2.45-160000.1.1",
            "binutils": "2.45-160000.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:21197-1.json"