4 matches found
AZL-40428 CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive...
AZL-79058 CVE-2024-24787 affecting package golang 1.26.7-1
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive...
CVE-2024-24787
On Darwin systems, building a Go module that includes CGO can trigger arbitrary code execution . This vulnerability occurs when using the Apple version of ld because of the usage of the -lto_library flag within a "#cgo LDFLAGS" directive. The issue specifically affects Google Golang versions prio...
SUSE CVE-2024-24787
On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive...