OPENSUSE-SU-2026:12315-1
Vulnerability from csaf_opensuse - Published: 2026-10-28 00:00 - Updated: 2026-10-29 18:23Summary
binutils-2.47-2.1 on GA media
Severity
Moderate
Notes
Title of the patch: binutils-2.47-2.1 on GA media
Description of the patch: These are all security issues fixed in the binutils-2.47-2.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12315
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.8 (High)
Affected products
Recommended
28 products, the same list as for
CVE-2026-19548
Threats
Impact
important
Affected products
Recommended
28 products, the same list as for
CVE-2026-19548
Threats
Impact
low
Affected products
Recommended
28 products, the same list as for
CVE-2026-19548
Threats
Impact
low
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "binutils-2.47-2.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the binutils-2.47-2.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-12315",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12315-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19548 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-19582 page",
"url": "https://www.suse.com/security/cve/CVE-2026-19582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-90828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-90828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-91781 page",
"url": "https://www.suse.com/security/cve/CVE-2026-91781/"
}
],
"title": "binutils-2.47-2.1 on GA media",
"tracking": {
"current_release_date": "2026-10-29T18:23:22Z",
"generator": {
"date": "2026-10-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:12315-1",
"initial_release_date": "2026-10-28T00:00:00Z",
"revision_history": [
{
"date": "2026-10-28T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-29T18:23:22Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "binutils-0:2.47-2.1.aarch64",
"product": {
"name": "binutils-0:2.47-2.1.aarch64",
"product_id": "binutils-0:2.47-2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils@2.47-2.1?arch=aarch64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-0:2.47-2.1.aarch64",
"product": {
"name": "binutils-devel-0:2.47-2.1.aarch64",
"product_id": "binutils-devel-0:2.47-2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel@2.47-2.1?arch=aarch64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-32bit-0:2.47-2.1.aarch64",
"product": {
"name": "binutils-devel-32bit-0:2.47-2.1.aarch64",
"product_id": "binutils-devel-32bit-0:2.47-2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-2.1?arch=aarch64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gprofng-0:2.47-2.1.aarch64",
"product": {
"name": "gprofng-0:2.47-2.1.aarch64",
"product_id": "gprofng-0:2.47-2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gprofng@2.47-2.1?arch=aarch64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf-nobfd0-0:2.47-2.1.aarch64",
"product": {
"name": "libctf-nobfd0-0:2.47-2.1.aarch64",
"product_id": "libctf-nobfd0-0:2.47-2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf-nobfd0@2.47-2.1?arch=aarch64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf0-0:2.47-2.1.aarch64",
"product": {
"name": "libctf0-0:2.47-2.1.aarch64",
"product_id": "libctf0-0:2.47-2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf0@2.47-2.1?arch=aarch64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsframe3-0:2.47-2.1.aarch64",
"product": {
"name": "libsframe3-0:2.47-2.1.aarch64",
"product_id": "libsframe3-0:2.47-2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsframe3@2.47-2.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "binutils-0:2.47-2.1.ppc64le",
"product": {
"name": "binutils-0:2.47-2.1.ppc64le",
"product_id": "binutils-0:2.47-2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils@2.47-2.1?arch=ppc64le\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-0:2.47-2.1.ppc64le",
"product": {
"name": "binutils-devel-0:2.47-2.1.ppc64le",
"product_id": "binutils-devel-0:2.47-2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel@2.47-2.1?arch=ppc64le\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-32bit-0:2.47-2.1.ppc64le",
"product": {
"name": "binutils-devel-32bit-0:2.47-2.1.ppc64le",
"product_id": "binutils-devel-32bit-0:2.47-2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-2.1?arch=ppc64le\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gprofng-0:2.47-2.1.ppc64le",
"product": {
"name": "gprofng-0:2.47-2.1.ppc64le",
"product_id": "gprofng-0:2.47-2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gprofng@2.47-2.1?arch=ppc64le\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf-nobfd0-0:2.47-2.1.ppc64le",
"product": {
"name": "libctf-nobfd0-0:2.47-2.1.ppc64le",
"product_id": "libctf-nobfd0-0:2.47-2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf-nobfd0@2.47-2.1?arch=ppc64le\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf0-0:2.47-2.1.ppc64le",
"product": {
"name": "libctf0-0:2.47-2.1.ppc64le",
"product_id": "libctf0-0:2.47-2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf0@2.47-2.1?arch=ppc64le\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsframe3-0:2.47-2.1.ppc64le",
"product": {
"name": "libsframe3-0:2.47-2.1.ppc64le",
"product_id": "libsframe3-0:2.47-2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsframe3@2.47-2.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "binutils-0:2.47-2.1.s390x",
"product": {
"name": "binutils-0:2.47-2.1.s390x",
"product_id": "binutils-0:2.47-2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils@2.47-2.1?arch=s390x\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-0:2.47-2.1.s390x",
"product": {
"name": "binutils-devel-0:2.47-2.1.s390x",
"product_id": "binutils-devel-0:2.47-2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel@2.47-2.1?arch=s390x\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-32bit-0:2.47-2.1.s390x",
"product": {
"name": "binutils-devel-32bit-0:2.47-2.1.s390x",
"product_id": "binutils-devel-32bit-0:2.47-2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-2.1?arch=s390x\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gprofng-0:2.47-2.1.s390x",
"product": {
"name": "gprofng-0:2.47-2.1.s390x",
"product_id": "gprofng-0:2.47-2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gprofng@2.47-2.1?arch=s390x\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf-nobfd0-0:2.47-2.1.s390x",
"product": {
"name": "libctf-nobfd0-0:2.47-2.1.s390x",
"product_id": "libctf-nobfd0-0:2.47-2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf-nobfd0@2.47-2.1?arch=s390x\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf0-0:2.47-2.1.s390x",
"product": {
"name": "libctf0-0:2.47-2.1.s390x",
"product_id": "libctf0-0:2.47-2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf0@2.47-2.1?arch=s390x\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsframe3-0:2.47-2.1.s390x",
"product": {
"name": "libsframe3-0:2.47-2.1.s390x",
"product_id": "libsframe3-0:2.47-2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsframe3@2.47-2.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "binutils-0:2.47-2.1.x86_64",
"product": {
"name": "binutils-0:2.47-2.1.x86_64",
"product_id": "binutils-0:2.47-2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils@2.47-2.1?arch=x86_64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-0:2.47-2.1.x86_64",
"product": {
"name": "binutils-devel-0:2.47-2.1.x86_64",
"product_id": "binutils-devel-0:2.47-2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel@2.47-2.1?arch=x86_64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "binutils-devel-32bit-0:2.47-2.1.x86_64",
"product": {
"name": "binutils-devel-32bit-0:2.47-2.1.x86_64",
"product_id": "binutils-devel-32bit-0:2.47-2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/binutils-devel-32bit@2.47-2.1?arch=x86_64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "gprofng-0:2.47-2.1.x86_64",
"product": {
"name": "gprofng-0:2.47-2.1.x86_64",
"product_id": "gprofng-0:2.47-2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/gprofng@2.47-2.1?arch=x86_64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf-nobfd0-0:2.47-2.1.x86_64",
"product": {
"name": "libctf-nobfd0-0:2.47-2.1.x86_64",
"product_id": "libctf-nobfd0-0:2.47-2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf-nobfd0@2.47-2.1?arch=x86_64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libctf0-0:2.47-2.1.x86_64",
"product": {
"name": "libctf0-0:2.47-2.1.x86_64",
"product_id": "libctf0-0:2.47-2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libctf0@2.47-2.1?arch=x86_64\u0026upstream=binutils-0:2.47-2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libsframe3-0:2.47-2.1.x86_64",
"product": {
"name": "libsframe3-0:2.47-2.1.x86_64",
"product_id": "libsframe3-0:2.47-2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsframe3@2.47-2.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-0:2.47-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64"
},
"product_reference": "binutils-0:2.47-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-0:2.47-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le"
},
"product_reference": "binutils-0:2.47-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-0:2.47-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x"
},
"product_reference": "binutils-0:2.47-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-0:2.47-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64"
},
"product_reference": "binutils-0:2.47-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-0:2.47-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64"
},
"product_reference": "binutils-devel-0:2.47-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-0:2.47-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le"
},
"product_reference": "binutils-devel-0:2.47-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-0:2.47-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x"
},
"product_reference": "binutils-devel-0:2.47-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-0:2.47-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64"
},
"product_reference": "binutils-devel-0:2.47-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-32bit-0:2.47-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64"
},
"product_reference": "binutils-devel-32bit-0:2.47-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-32bit-0:2.47-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le"
},
"product_reference": "binutils-devel-32bit-0:2.47-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-32bit-0:2.47-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x"
},
"product_reference": "binutils-devel-32bit-0:2.47-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "binutils-devel-32bit-0:2.47-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64"
},
"product_reference": "binutils-devel-32bit-0:2.47-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gprofng-0:2.47-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64"
},
"product_reference": "gprofng-0:2.47-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gprofng-0:2.47-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le"
},
"product_reference": "gprofng-0:2.47-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gprofng-0:2.47-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x"
},
"product_reference": "gprofng-0:2.47-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gprofng-0:2.47-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64"
},
"product_reference": "gprofng-0:2.47-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf-nobfd0-0:2.47-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64"
},
"product_reference": "libctf-nobfd0-0:2.47-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf-nobfd0-0:2.47-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le"
},
"product_reference": "libctf-nobfd0-0:2.47-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf-nobfd0-0:2.47-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x"
},
"product_reference": "libctf-nobfd0-0:2.47-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf-nobfd0-0:2.47-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64"
},
"product_reference": "libctf-nobfd0-0:2.47-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf0-0:2.47-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64"
},
"product_reference": "libctf0-0:2.47-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf0-0:2.47-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le"
},
"product_reference": "libctf0-0:2.47-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf0-0:2.47-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x"
},
"product_reference": "libctf0-0:2.47-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libctf0-0:2.47-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64"
},
"product_reference": "libctf0-0:2.47-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsframe3-0:2.47-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64"
},
"product_reference": "libsframe3-0:2.47-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsframe3-0:2.47-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le"
},
"product_reference": "libsframe3-0:2.47-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsframe3-0:2.47-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x"
},
"product_reference": "libsframe3-0:2.47-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsframe3-0:2.47-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
},
"product_reference": "libsframe3-0:2.47-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-19548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19548"
}
],
"notes": [
{
"category": "general",
"text": "Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in ld/plugin.c frees the original BFD object via bfd_close/_bfd_delete_bfd when entry-\u003ethe_bfd-\u003emy_archive == NULL, but the caller retains both the original abfd parameter and a shallow copy (orig_input.the_bfd) as dangling pointers. These dangling pointers are subsequently dereferenced at three distinct locations in add_archive_element:\n\n1. Line ~1442: accessing abfd-\u003emy_archive via bfd_usrdata(abfd-\u003emy_archive)\n2. Line ~1493: multiple accesses to abfd and abfd-\u003emy_archive in a conditional check and bfd_get_filename call\n3. Line ~1525: dereferencing the shallow copy orig_input.the_bfd-\u003emy_archive in trace/verbose logging\n\nThe vulnerability is triggered when LTO plugins are active (link_info.lto_plugin_active is true) and the input object has abfd-\u003emy_archive == NULL, which is a valid state for standalone object files. Red Hat builds binutils with --enable-plugins and --enable-lto, confirming the vulnerable code path is compiled in and reachable.\n\nAn attacker who can supply a crafted object or archive file to a build process using LTO-enabled linking could exploit this flaw to cause a denial of service (linker crash via segmentation fault). Arbitrary code execution is theoretically possible through heap manipulation but is substantially mitigated by hardening measures including stack protector, FORTIFY_SOURCE, ASLR, and PIE.\n\nThe attack surface is limited to build-time environments - the linker is a development tool not exposed in production runtime. The most realistic exploitation scenario is a supply chain attack introducing a crafted object file as a build dependency in CI/CD pipelines or development environments.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19548",
"url": "https://www.suse.com/security/cve/CVE-2026-19548"
},
{
"category": "external",
"summary": "SUSE Bug 1275267 for CVE-2026-19548",
"url": "https://bugzilla.suse.com/1275267"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-19548"
},
{
"cve": "CVE-2026-19582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-19582"
}
],
"notes": [
{
"category": "general",
"text": "Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-19582",
"url": "https://www.suse.com/security/cve/CVE-2026-19582"
},
{
"category": "external",
"summary": "SUSE Bug 1275936 for CVE-2026-19582",
"url": "https://bugzilla.suse.com/1275936"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-19582"
},
{
"cve": "CVE-2026-90828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-90828"
}
],
"notes": [
{
"category": "general",
"text": "A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-90828",
"url": "https://www.suse.com/security/cve/CVE-2026-90828"
},
{
"category": "external",
"summary": "SUSE Bug 1280605 for CVE-2026-90828",
"url": "https://bugzilla.suse.com/1280605"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-90828"
},
{
"cve": "CVE-2026-91781",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-91781"
}
],
"notes": [
{
"category": "general",
"text": "A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade the affected component.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-91781",
"url": "https://www.suse.com/security/cve/CVE-2026-91781"
},
{
"category": "external",
"summary": "SUSE Bug 1280611 for CVE-2026-91781",
"url": "https://bugzilla.suse.com/1280611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:binutils-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:binutils-devel-32bit-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:gprofng-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf-nobfd0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libctf0-0:2.47-2.1.x86_64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.aarch64",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.ppc64le",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.s390x",
"openSUSE Tumbleweed:libsframe3-0:2.47-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-28T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-91781"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.