Arbitrary code execution during build on darwin via "-l to_library" in cgo in cmd/go

What could go wrong?

Microsoft fixed a security weakness. Details are limited to avoid helping attackers.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

azl3 gcc 13.2.0-7 on Azure Linux 3.0, azl3 golang 1.26.10-1 on Azure Linux 3.0, azl3 golang 1.27.3-1 on Azure Linux 3.0, azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, azl3 tensorflow 2.16.1-11 on Azure Linux 3.0

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: no KB article listed. Official page.