Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade ose-azure-acr-image-credential-providerUpgrade cri-oUpgrade cri-toolsUpgrade openshiftUpgrade openshift-clientsUpgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-crio-credential-provider | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade python3-podmanUpgrade skopeoUpgrade podman-catatonitUpgrade grafana-pcp-debuginfoUpgrade ignition-grubUpgrade podmanUpgrade osbuild-composer-debuginfoUpgrade git-lfs-debugsourceUpgrade fuse-overlayfsUpgrade delve-debuginfoUpgrade skopeo-debugsourceUpgrade netavarkUpgrade aardvark-dnsUpgrade go-fdo-client-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade grafana-pcpUpgrade rhc-worker-playbook-debuginfoUpgrade criu-debuginfoUpgrade conmonUpgrade ignitionUpgrade criuUpgrade ignition-edgeUpgrade yggdrasil-debuginfoUpgrade go-fdo-server-debuginfoUpgrade rhc-debugsourceUpgrade delve-debugsourceUpgrade go-fdo-server-manufacturerUpgrade buildah-testsUpgrade toolbox-testsUpgrade buildahUpgrade go-fdo-client-debugsourceUpgrade crun-debugsourceUpgrade yggdrasil-worker-package-manager-debugsourceUpgrade image-builder-debugsourceUpgrade ignition-debuginfoUpgrade image-builderUpgrade slirp4netnsUpgrade containers-commonUpgrade osbuild-composer-tests-debuginfoUpgrade criu-libsUpgrade golang-raceUpgrade conmon-debugsourceUpgrade grafana-debuginfoUpgrade libslirp-develUpgrade runc-debugsourceUpgrade yggdrasil-develUpgrade buildah-tests-debuginfoUpgrade flightctl-cliUpgrade fuse-overlayfs-debugsourceUpgrade grafana-selinuxUpgrade buildah-debuginfoUpgrade libslirpUpgrade golang-srcUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade golangUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade go-fdo-server-ownerUpgrade cockpit-podmanUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-coreUpgrade yggdrasil-worker-package-managerUpgrade rhc-worker-playbook-debugsourceUpgrade rhc-worker-playbookUpgrade crun-debuginfoUpgrade git-lfs-debuginfoUpgrade go-fdo-clientUpgrade golang-miscUpgrade golang-testsUpgrade slirp4netns-debugsourceUpgrade flightctl-agentUpgrade podman-tests-debuginfoNo solution existsUpgrade ignition-validateUpgrade buildah-debugsourceUpgrade ignition-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criu-libs-debuginfoUpgrade rhcUpgrade osbuild-composerUpgrade toolbox-debuginfoUpgrade delveUpgrade containernetworking-pluginsUpgrade yggdrasilUpgrade skopeo-debuginfoUpgrade golang-binUpgrade osbuild-composer-workerUpgrade ipp-usb-debuginfoUpgrade rhc-develUpgrade git-lfsUpgrade flightctl-selinuxUpgrade yggdrasil-examples-debuginfoUpgrade grafana-debugsourceUpgrade grafanaUpgrade flightctl-servicesUpgrade runcUpgrade yggdrasil-worker-package-manager-debuginfoUpgrade container-selinuxUpgrade skopeo-testsUpgrade image-builder-debuginfoUpgrade crunUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade rhc-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-debugsourceUpgrade opentelemetry-collectorUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-docsUpgrade osbuild-composer-worker-debuginfoUpgrade flightctl-observabilityUpgrade ignition-validate-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade go-fdo-server-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-dockerUpgrade go-fdo-serverUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade udicaUpgrade grafana-pcp-debugsourceUpgrade critUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade ipp-usbUpgrade podman-remoteUpgrade yggdrasil-debugsourceUpgrade criu-develUpgrade podman-debugsourceUpgrade go-fdo-server-rendezvousUpgrade go-toolset | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade runcUpgrade osbuild-composerUpgrade podman-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade git-lfsUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade grafana-pcpUpgrade ipp-usb-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-debugsourceUpgrade go-fdo-serverUpgrade slirp4netnsUpgrade critUpgrade slirp4netns-debugsourceUpgrade osbuild-composer-debuginfoUpgrade containers-commonUpgrade podman-gvproxyUpgrade podman-remoteUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade osbuild-composer-workerUpgrade toolbox-debuginfoUpgrade osbuild-composer-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade git-lfs-debuginfoUpgrade libslirp-develUpgrade opentelemetry-collectorUpgrade grafanaUpgrade criu-debugsourceUpgrade ipp-usbUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade delveUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade go-toolsetUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade grafana-debugsourceUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade osbuild-composer-coreUpgrade criuUpgrade go-fdo-client-debuginfoUpgrade golangUpgrade go-fdo-client-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade go-fdo-server-debuginfoUpgrade skopeo-debugsourceUpgrade git-lfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade image-builderUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade grafana-selinuxUpgrade grafana-pcp-debuginfoUpgrade libslirpUpgrade fuse-overlayfsUpgrade skopeoUpgrade osbuild-composer-core-debuginfoUpgrade podmanUpgrade image-builder-debugsourceUpgrade grafana-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade go-fdo-server-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade golang-binUpgrade buildah-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade image-builder-debuginfoUpgrade conmonUpgrade conmon-debugsourceUpgrade podman-testsUpgrade grafana-pcp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade toolbox-debugsourceUpgrade golang-raceUpgrade go-fdo-clientUpgrade toolbox | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub