Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade python3-criuUpgrade criu-libsUpgrade udicaUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade libslirpUpgrade libslirp-develUpgrade skopeoUpgrade delveUpgrade podman-testsUpgrade git-lfsUpgrade toolboxUpgrade container-selinuxUpgrade conmonUpgrade golang-docsUpgrade runcUpgrade grafanaUpgrade crunUpgrade podman-remoteUpgrade critUpgrade criu-develUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade toolbox-testsUpgrade podmanUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade grafana-pcpUpgrade golang-miscUpgrade slirp4netnsUpgrade python3-podmanUpgrade buildahUpgrade criuUpgrade podman-dockerUpgrade golang-testsUpgrade cockpit-podmanUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade netavarkUpgrade buildah-testsUpgrade golang-race | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-googlecode-sqlite-develUpgrade golang-github-syndtr-gocapability-develUpgrade go-filesystemUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade runcUpgrade runc-debuginfoUpgrade golang-testsUpgrade golang-github-gorilla-context-develUpgrade golang-googlecode-net-develUpgrade golang-docsUpgrade golang-github-kr-pty-develUpgrade golang-sharedUpgrade golang-srcUpgrade golang-github-godbus-dbus-develUpgrade golang-raceUpgrade go-rpm-macrosUpgrade golistUpgrade golist-debuginfoUpgrade golang-github-gorilla-mux-develUpgrade go-srpm-macrosUpgrade go-rpm-templates | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golist-debugsourceUpgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golang-testsUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golistUpgrade golang-miscUpgrade golang-srcUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade conmon-debugsourceUpgrade grafana-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade toolbox-testsUpgrade libslirpUpgrade grafana-pcp-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade podman-gvproxyUpgrade delveUpgrade git-lfs-debugsourceUpgrade podman-testsUpgrade crunUpgrade python3-podmanUpgrade conmonUpgrade delve-debugsourceUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade criu-develUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade containers-commonUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade buildah-testsUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade toolbox-debuginfoUpgrade git-lfs-debuginfoUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade grafana-pcpUpgrade skopeo-debugsourceUpgrade golangUpgrade criu-debugsourceUpgrade critUpgrade golang-testsUpgrade runc-debuginfoUpgrade podman-catatonitUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade golang-miscUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade buildahUpgrade git-lfsUpgrade golang-docsUpgrade criu-libsUpgrade criuUpgrade toolbox-debugsourceUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade golang-srcUpgrade golang-binUpgrade grafanaUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade aardvark-dnsUpgrade golang-srcUpgrade libslirpUpgrade conmonUpgrade git-lfsUpgrade skopeo-testsUpgrade podman-testsUpgrade crunUpgrade libslirp-develUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade podman-gvproxyUpgrade python3-podmanUpgrade grafanaUpgrade cockpit-podmanUpgrade criu-develUpgrade go-toolsetUpgrade buildah-testsUpgrade containers-commonUpgrade python3-criuUpgrade delveUpgrade buildahUpgrade golangUpgrade podman-catatonitUpgrade critUpgrade netavarkUpgrade grafana-pcpUpgrade criuUpgrade podman-pluginsUpgrade podmanUpgrade skopeoUpgrade golang-binUpgrade runcUpgrade podman-remoteUpgrade golang-miscUpgrade podman-dockerUpgrade udicaUpgrade golang-testsUpgrade golang-raceUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade fuse-overlayfs | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delveUpgrade podman-pluginsUpgrade golang-docsUpgrade runc-debuginfoUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade critUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade git-lfsUpgrade buildah-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade python3-criuUpgrade conmon-debuginfoUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade delve-debuginfoUpgrade container-selinuxUpgrade podman-debugsourceUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade go-toolsetUpgrade criu-develUpgrade grafana-pcpUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade grafana-debuginfoUpgrade containernetworking-pluginsUpgrade git-lfs-debuginfoUpgrade podman-dockerUpgrade fuse-overlayfs-debuginfoUpgrade grafana-pcp-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceNo solution existsUpgrade podman-testsUpgrade golang-miscUpgrade cockpit-podmanUpgrade golangUpgrade conmon-debugsourceUpgrade python3-podmanUpgrade runcUpgrade udicaUpgrade toolboxUpgrade golang-raceUpgrade podmanUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade buildahUpgrade git-lfs-debugsourceUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade conmonUpgrade criu-libs-debuginfoUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade golang-testsUpgrade runc-debugsourceUpgrade golang-srcUpgrade buildah-testsUpgrade netavarkUpgrade slirp4netns | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade critUpgrade toolbox-debuginfoUpgrade podman-testsUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade libslirpUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade skopeo-debuginfoUpgrade grafanaUpgrade criu-develUpgrade criu-libsUpgrade crunUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade git-lfsUpgrade git-lfs-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade delveUpgrade delve-debuginfoUpgrade python3-criuUpgrade runc-debuginfoUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade criuUpgrade grafana-debuginfoUpgrade toolbox-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade delve-debugsourceUpgrade conmon-debugsourceUpgrade toolboxUpgrade skopeoUpgrade grafana-pcp-debuginfoUpgrade grafana-pcpUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade conmonUpgrade podman-remoteUpgrade crun-debugsourceUpgrade git-lfs-debugsourceUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade buildahUpgrade golangUpgrade golang-raceUpgrade buildah-testsUpgrade runcUpgrade golang-bin | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.17Upgrade go1.17-raceUpgrade go1.17-docUpgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.18Upgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-srcUpgrade golang-1.13-goUpgrade golang-1.16-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub