Posted by Alan Coopersmith on Oct 29 Forwarded Message Subject: [security] Protecting against CVE-2026-98432 Date: Thu, 29 Oct 2026 16:34:28 -0700 (PDT) From: Neal Patel To: golang-announce Hi Gophers, The recent disclosure of CVE-2026-98432 describes a use-after-free issue which impacts IPv4 TCP connection handling in...
Fwd: Protecting against CVE-2026-98432 when using Go programs
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/437
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Re: Protecting against CVE-2026-98432 when using Go programs
Posted by John Haxby on Oct 30 MPTCP can be disabled system-wide on Linux with `sysctl -w net.mptcp.enabled=0` This will, of course, upset programs that require mptcp…
SequenceHash: multihashing for the rest of us
Multihashing is one of those cryptographic tasks that’s easy not to think about too much. This is unfortunate, because multihashing is a common stumbling point when…
CVE-2026-120135: Apache Thrift: Java TProtocolUtil.skip() does not limit the recursion depth by default
Posted by Jens Geyer on Oct 30 Severity: important CVSS 4.0: 8.2 (high) CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected versions: - Apache…
Linux security advisory (AV26-1108)
Serial Number: AV26-1108 Date: October 30, 2026 As of October 15, 2026, Linux is affected by a vulnerability in the following product: Linux Prior to 5.10.272 Prior…
Re: CVE-2026-102508: Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade
Posted by Abhinav Agarwal on Oct 30 Hi, I reported the findings behind CVE-2026-102508 and CVE-2026-102509 [1][2]. This follow-up gives the mechanisms and triggers for…
The GNU C Library security advisories update for 2026-10-30
Posted by Adhemerval Zanella Netto on Oct 30 The following security advisories have been published: GLIBC-SA-2026-0025: gettext: Directory traversal via the LANGUAGE…