Dear Maintainer,

This is a non-maintainer upload (NMU) intended for trixie to fix CVE-2025-1176, a heap-buffer-overflow vulnerability in the GNU linker (ld) when invoked with the -w and --gc-sections options on a specially crafted ELF file.

The issue is triggered during garbage collection of unused sections, potentially leading to memory corruption and crashes. This patch backports the upstream commit:

https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=f9978defb6fab0bd8583942d97c112b0932ac814

which adds additional validation to avoid invalid memory access in this code path.

The patch has been tested against binutils 2.44-3 in trixie and verified to resolve the CVE using the public PoC from:

https://sourceware.org/bugzilla/show_bug.cgi?id=32636

I am attaching a `.debdiff` for this targeted fix.

Please consider incorporating this fix into trixie to address this vulnerability.

Thank you for maintaining binutils.

Best regards,
Yang Wang
<yang.wang@windriver.com>