[oss-security] Fwd: Protecting against CVE-2026-98432 when using Go programs [LWN.net]

The Go Programming Language

Go is an open source programming language that makes it simple to build secure, scalable systems.

oss-security - Re: CVE request: io_uring zcrx freelist OOB write

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog

A CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.

Antidetect Browser for Managing Multiple Accounts Safely | Gologin

Create and run multiple accounts on any platform without bans. Gologin antidetect browser helps you manage unlimited profiles safely with unique digital fingerprints.⚡️7-Days Trial!

Commix Project | Automated All-in-One OS Command Injection Exploitation Tool.

Automated exploitation of command and code injection flaws, from detection to full control of the underlying operating system.

WTF Ubuntu?

In case you missed it: CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.

Genode - Genode Operating System Framework

We understand the complexity of code and policy as the most fundamental security problem shared by modern general-purpose operating systems. Because of high functional demands and dynamic workloads, however, this complexity cannot be avoided. But it can be organized. Genode is a novel OS architecture that is able to master complexity by applying a strict organizational structure to all software components including device drivers, system services, and applications. The Genode OS framework is an open-source tool kit for building highly secure component-based operating systems. It scales from embedded devices to dynamic general-purpose computing.

oss-security - Dirty Frag: Universal Linux LPE

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

GTFOBins

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

You can just hack on ATProto

Building a lightweight Go app on the Jetstream

Go 1.7 is released - The Go Programming Language

Go 1.7 adds faster x86 compiled code, context in the standard library, and more.

proposal: cmd/cgo: cgo without a C toolchain · Issue #81450 · golang/go

Cgo Without C Toolchain Background Cgo provides a mechanism to incorporate C code into Go programs. Currently, it requires a C toolchain to be present on the host system whenever building code with...

CLI quickstart – Codex Security | ChatGPT Learn

Set up Codex Security, run a local scan, and review the report, findings, and coverage.

Mitigating High Severity RunC Vulnerability (CVE-2019-5736)

A high severity (CVSS score 7.2) vulnerability (CVE-2019-5763) was found in runc, allowing attackers to compromise the container host. Patches are already available from most providers. Aqua customers can prevent this vulnerability from being exploited by applying the appropriate runtime policies.