Proposal Details Idea On Linux, support enforcing Seccomp-BPF filters between fork (2) and execve (2), when executing subprocesses through os/exec . S
x/net/html security fix pre-announced for October 27
The Go security team has pre-announced a golang.org/x/net/html fix landing during US business hours on Tuesday October 27, covering multiple CVEs, so anyone pulling that module into a server has a calendar entry to make. Elsewhere, there is a proposal to let os/exec install seccomp-bpf filters between fork and execve on Linux, which pairs nicely with the week's sandboxing mood, and a smaller one from mvdan to add io/fs.ErrNotDir for code probing candidate directories.

The Go security team has pre-announced a golang.org/x/net/html fix landing during US business hours on Tuesday October 27, covering multiple CVEs, so anyone pulling that module into a server has a calendar entry to make. Elsewhere, there is a proposal to let os/exec install seccomp-bpf filters between fork and execve on Linux, which pairs nicely with the week's sandboxing mood, and a smaller one from mvdan to add io/fs.ErrNotDir for code probing candidate directories.
Proposal Details Code that probes candidate directories, such as a package loader checking whether foo/bar holds a package, needs to treat "a path ele
Hello gophers, We plan to issue a security fix for the package golang.org/x/net/html in the golang.org/x/net module during US business hours on Tuesday, October 27. This will cover the following CVEs:
Join GoSF @ San Francisco, US on Thu Nov 5
Join EUG Go @ Eugene, US on Wed Nov 4
The hidden design mistakes that make dependency injection harder than it should be Continue reading on Stackademic »
Is 1.0.0–1 older or newer than 1.0.0? Three of six version parsers say newer, two say older, one refuses to parse it. A run-it-yourself… Continue reading on Medium »
Ever found yourself staring at that monthly AWS bill, just kinda wishing it was a little less hefty? Like, seriously, what’s the deal with… Continue reading on Medium »
What Temporal is, where it shines and where it hurts, and how Zoop uses it to enrich customer sheets with pause, resume, stop and retries… Continue reading on Zoop Engineering »
Introduction Continue reading on Medium »
Running an open-source AI model on your own hardware sounds straightforward. Load a model, send a prompt, get an answer.
Why are Kubernetes, Docker, Terraform, and so many infrastructure tools written in Go? The answer comes down to a ...
Want to learn coding in 2025 but confused about where to start? In this video, we cover the Top 5 Programming Languages that ...
go-staticmaps: A go (golang) library and command line tool to render static. 2 minutes from clone to running. 2 minutes from clone ...
Getting Started with Go Review: UC Irvine's Golang Course on Coursera Getting Started with Go (UC Irvine) on Coursera: ...

$190k–$190k