patch 16357

A new security advisory has placed GNU Binutils under the microscope: CVE-2025-11840 is an out-of-bounds read in the vfinfo function inside ldmisc.c that affects Binutils 2.45, can be triggered by a local actor, and — according to multiple trackers — already has a public proof of concept and an...