https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:24:15.498756+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:3922 ALSA-2023:3922 — Critical: go-toolset:rhel8 security update 2026-10-03T10:24:15.526482+00:00

Affected: AlmaLinux:8: delve, AlmaLinux:8: go-toolset, AlmaLinux:8: golang, AlmaLinux:8: golang-bin, AlmaLinux:8: golang-docs, AlmaLinux:8: golang-misc, AlmaLinux:8: golang-race, AlmaLinux:8: golang-src, AlmaLinux:8: golang-tests

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

Security Fix(es):

* golang: cmd/go: go command may generate unexpected code at build time when using cgo (CVE-2023-29402) * golang: cmd/go: go command may execute arbitrary code at build time when using cgo (CVE-2023-29404) * golang: cmd/cgo: Arbitratry code execution triggered by linker flags (CVE-2023-29405) * golang: runtime: unexpected behavior of setuid/setgid binaries (CVE-2023-29403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-03200 bdu:2023-03200 2026-10-03T10:24:15.526561+00:00 bdu:2023-03200 https://cve.radiocsirt.org/vuln/bell-cve-2023-29403 Withdrawn: BELL-CVE-2023-29403 — CVE-2023-29403 does not affect BellSoft software 2026-10-03T10:24:15.526578+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-golang-2023-29403 BIT-golang-2023-29403 — Unsafe behavior in setuid/setgid binaries in runtime 2026-10-03T10:24:15.526593+00:00

Affected: Bitnami: golang

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0650 certfr-2023-avi-0650 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Copy Data Management. Certaines d'entre elles permett… 2026-10-03T10:24:15.526614+00:00 certfr-2023-avi-0650 https://cve.radiocsirt.org/vuln/euvd-2026-216415 EUVD-2026-216415 2026-10-03T10:24:15.526629+00:00 EUVD-2026-216415 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29403 fkie_cve-2023-29403 2026-10-03T10:24:15.526640+00:00

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.

 https://cve.radiocsirt.org/vuln/ghsa-rxx3-4978-3cc9 GHSA-rxx3-4978-3cc9 2026-10-03T10:24:15.526661+00:00

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.

 https://cve.radiocsirt.org/vuln/gsd-2023-29403 gsd-2023-29403 2026-10-03T10:24:15.526676+00:00 gsd-2023-29403 https://cve.radiocsirt.org/vuln/msrc_cve-2023-29403 msrc_CVE-2023-29403 — Unsafe behavior in setuid/setgid binaries in runtime 2026-10-03T10:24:15.526686+00:00 msrc_CVE-2023-29403 https://cve.radiocsirt.org/vuln/oesa-2023-1404 OESA-2023-1404 — golang security update 2026-10-03T10:24:15.526700+00:00

Affected: openEuler:20.03-LTS-SP1: golang, openEuler:20.03-LTS-SP3: golang, openEuler:22.03-LTS: golang, openEuler:22.03-LTS-SP1: golang, openEuler:22.03-LTS-SP2: golang

The Go Programming Language

Security Fix(es):

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.(CVE-2023-29403)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12987-1 openSUSE-SU-2024:12987-1 — go1.19-1.19.10-1.1 on GA media 2026-10-03T10:24:15.526728+00:00

go1.19-1.19.10-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:3920 RHSA-2023:3920 — Red Hat Security Advisory: go-toolset-1.19 and go-toolset-1.19-golang security update 2026-10-03T10:24:15.526743+00:00

golang: cmd/go: go command may generate unexpected code at build time when using cgo golang: runtime: unexpected behavior of setuid/setgid binaries golang: cmd/go: go command may execute arbitrary code at build time when using cgo golang: cmd/cgo: Arbitrary code execution triggered by linker flags

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29403 UBUNTU-CVE-2023-29403 2026-10-03T10:24:15.526762+00:00

Affected: Ubuntu:14.04:LTS: golang-1.10, Ubuntu:Pro:16.04:LTS: golang-1.18, Ubuntu:16.04:LTS: golang-1.10, Ubuntu:16.04:LTS: golang-1.6, Ubuntu:Pro:16.04:LTS: golang-1.13, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:Pro:18.04:LTS: golang-1.13, Ubuntu:Pro:18.04:LTS: golang-1.16, Ubuntu:Pro:18.04:LTS: golang-1.18, Ubuntu:18.04:LTS: golang-1.8 and 10 more

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1377 WID-SEC-W-2023-1377 — Golang Go: Mehrere Schwachstellen 2026-10-03T10:24:15.526801+00:00

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Code auszuführen, Informationen offenzulegen oder nicht näher spezifizierte Auswirkungen zu erzielen.