AZL-40428 CVE-2024-24787 affecting package msft-golang for versions less than 1.22.3

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive...

AZL-79058 CVE-2024-24787 affecting package golang 1.26.7-1

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive...

CVE-2024-24787

Building a Go module containing CGO on Darwin can trigger arbitrary code execution when using the Apple version of ld . This vulnerability is caused by the use of the -lto_library flag within a "#cgo LDFLAGS" directive. A proof-of-concept (PoC) for this issue has been documented in the provided m...

SUSE CVE-2024-24787

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive...