diff --git a/cross-aarch64-binutils.changes b/cross-aarch64-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-aarch64-binutils.changes
+++ b/cross-aarch64-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-aarch64-binutils.spec b/cross-aarch64-binutils.spec
index c8bc307..8972102 100644
--- a/cross-aarch64-binutils.spec
+++ b/cross-aarch64-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-arm-binutils.changes b/cross-arm-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-arm-binutils.changes
+++ b/cross-arm-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-arm-binutils.spec b/cross-arm-binutils.spec
index e1726cd..7e069e4 100644
--- a/cross-arm-binutils.spec
+++ b/cross-arm-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-avr-binutils.changes b/cross-avr-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-avr-binutils.changes
+++ b/cross-avr-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-avr-binutils.spec b/cross-avr-binutils.spec
index f1ae9c3..e5f541e 100644
--- a/cross-avr-binutils.spec
+++ b/cross-avr-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-epiphany-binutils.changes b/cross-epiphany-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-epiphany-binutils.changes
+++ b/cross-epiphany-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-epiphany-binutils.spec b/cross-epiphany-binutils.spec
index a34093e..d61b341 100644
--- a/cross-epiphany-binutils.spec
+++ b/cross-epiphany-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-hppa-binutils.changes b/cross-hppa-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-hppa-binutils.changes
+++ b/cross-hppa-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-hppa-binutils.spec b/cross-hppa-binutils.spec
index 44a6ff7..c61fb5b 100644
--- a/cross-hppa-binutils.spec
+++ b/cross-hppa-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-hppa64-binutils.changes b/cross-hppa64-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-hppa64-binutils.changes
+++ b/cross-hppa64-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-hppa64-binutils.spec b/cross-hppa64-binutils.spec
index 59eb5d8..9f5465e 100644
--- a/cross-hppa64-binutils.spec
+++ b/cross-hppa64-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-i386-binutils.changes b/cross-i386-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-i386-binutils.changes
+++ b/cross-i386-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-i386-binutils.spec b/cross-i386-binutils.spec
index bf87c6f..fb210bd 100644
--- a/cross-i386-binutils.spec
+++ b/cross-i386-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-ia64-binutils.changes b/cross-ia64-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-ia64-binutils.changes
+++ b/cross-ia64-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-ia64-binutils.spec b/cross-ia64-binutils.spec
index 68915f6..c9837e3 100644
--- a/cross-ia64-binutils.spec
+++ b/cross-ia64-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-m68k-binutils.changes b/cross-m68k-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-m68k-binutils.changes
+++ b/cross-m68k-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-m68k-binutils.spec b/cross-m68k-binutils.spec
index 0ca5062..49b11bd 100644
--- a/cross-m68k-binutils.spec
+++ b/cross-m68k-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-mips-binutils.changes b/cross-mips-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-mips-binutils.changes
+++ b/cross-mips-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-mips-binutils.spec b/cross-mips-binutils.spec
index 069524a..b438c86 100644
--- a/cross-mips-binutils.spec
+++ b/cross-mips-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-ppc-binutils.changes b/cross-ppc-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-ppc-binutils.changes
+++ b/cross-ppc-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-ppc-binutils.spec b/cross-ppc-binutils.spec
index 2677a4b..dd93b91 100644
--- a/cross-ppc-binutils.spec
+++ b/cross-ppc-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-ppc64-binutils.changes b/cross-ppc64-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-ppc64-binutils.changes
+++ b/cross-ppc64-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-ppc64-binutils.spec b/cross-ppc64-binutils.spec
index e169f24..f8d90ce 100644
--- a/cross-ppc64-binutils.spec
+++ b/cross-ppc64-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-ppc64le-binutils.changes b/cross-ppc64le-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-ppc64le-binutils.changes
+++ b/cross-ppc64le-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-ppc64le-binutils.spec b/cross-ppc64le-binutils.spec
index d992ddd..40e9411 100644
--- a/cross-ppc64le-binutils.spec
+++ b/cross-ppc64le-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-rx-binutils.changes b/cross-rx-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-rx-binutils.changes
+++ b/cross-rx-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-rx-binutils.spec b/cross-rx-binutils.spec
index f3f6915..831e1d6 100644
--- a/cross-rx-binutils.spec
+++ b/cross-rx-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-s390-binutils.changes b/cross-s390-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-s390-binutils.changes
+++ b/cross-s390-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-s390-binutils.spec b/cross-s390-binutils.spec
index 99e42ee..4d5cd21 100644
--- a/cross-s390-binutils.spec
+++ b/cross-s390-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-s390x-binutils.changes b/cross-s390x-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-s390x-binutils.changes
+++ b/cross-s390x-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-s390x-binutils.spec b/cross-s390x-binutils.spec
index 3c11c2e..29e0bbd 100644
--- a/cross-s390x-binutils.spec
+++ b/cross-s390x-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-sparc-binutils.changes b/cross-sparc-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-sparc-binutils.changes
+++ b/cross-sparc-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-sparc-binutils.spec b/cross-sparc-binutils.spec
index e8b9f9e..832bccb 100644
--- a/cross-sparc-binutils.spec
+++ b/cross-sparc-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-sparc64-binutils.changes b/cross-sparc64-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-sparc64-binutils.changes
+++ b/cross-sparc64-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-sparc64-binutils.spec b/cross-sparc64-binutils.spec
index 1aead62..9fd8819 100644
--- a/cross-sparc64-binutils.spec
+++ b/cross-sparc64-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-spu-binutils.changes b/cross-spu-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-spu-binutils.changes
+++ b/cross-spu-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-spu-binutils.spec b/cross-spu-binutils.spec
index c298ab2..58eb57d 100644
--- a/cross-spu-binutils.spec
+++ b/cross-spu-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90
diff --git a/cross-x86_64-binutils.changes b/cross-x86_64-binutils.changes
index f43c9bc..a4f65a5 100644
--- a/cross-x86_64-binutils.changes
+++ b/cross-x86_64-binutils.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Fri Mar 17 15:28:26 UTC 2017 - matz@suse.com
+
+- Add fix-security-bugs.diff to fix bnc#1029907, bnc#1029908,
+  bnc#1029909 and more.  Upstream bugs fixed: 
+  PR 21135, PR 21137, PR 21139, PR 21147, PR 21148, PR 21149,
+  PR 21150, PR 21151, PR 21155, PR 21156, PR 21157, PR 21158,
+  PR 21159
+
 -------------------------------------------------------------------
 Wed Mar  8 11:25:04 UTC 2017 - rguenther@suse.com
 
diff --git a/cross-x86_64-binutils.spec b/cross-x86_64-binutils.spec
index e45d4fb..d33c6af 100644
--- a/cross-x86_64-binutils.spec
+++ b/cross-x86_64-binutils.spec
@@ -102,6 +102,7 @@ Patch22:        binutils-bfd_h.patch
 Patch34:        aarch64-common-pagesize.patch
 # Backport 758d96d834ba725461a
 Patch36:        binutils-bso21193.diff
+Patch37:        fix-security-bugs.diff
 Patch90:        cross-avr-nesc-as.patch
 Patch92:        cross-avr-omit_section_dynsym.patch
 Patch93:        cross-avr-size.patch
@@ -178,6 +179,7 @@ echo "make check will return with %{make_check_handling} in case of testsuite fa
 %patch22
 %patch34 -p1
 %patch36 -p1
+%patch37 -p1
 %if "%{TARGET}" == "avr"
 cp gas/config/tc-avr.h gas/config/tc-avr-nesc.h
 %patch90