Linker flag injection via cgo_import_dynamic and PE DLL names in cmd/cgo, cmd/compile, and cmd/link

What could go wrong?

Microsoft fixed a security weakness. Details are limited to avoid helping attackers.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

azl3 golang 1.26.10-1 on Azure Linux 3.0, azl3 golang 1.27.3-1 on Azure Linux 3.0, azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, azl3 tensorflow 2.16.1-11 on Azure Linux 3.0

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: no KB article listed. Official page.