Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade criu-libsUpgrade delveUpgrade git-lfsUpgrade podman-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade criu-develUpgrade skopeo-testsUpgrade buildah-testsUpgrade container-selinuxUpgrade libslirp-develUpgrade python3-criuUpgrade grafanaUpgrade cockpit-podmanUpgrade podman-dockerUpgrade podman-gvproxyUpgrade libslirpUpgrade conmonUpgrade criuUpgrade toolboxUpgrade golang-raceUpgrade golang-binUpgrade podman-catatonitUpgrade udicaUpgrade buildahUpgrade skopeoUpgrade golang-testsUpgrade grafana-pcpUpgrade critUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade crunUpgrade podman-remoteUpgrade netavarkUpgrade podmanUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade golang-miscUpgrade golangUpgrade runcUpgrade golang-docsUpgrade python3-podman | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-kr-pty-develUpgrade golang-sharedUpgrade golang-googlecode-net-develUpgrade golang-binUpgrade go-filesystemUpgrade golang-srcUpgrade golang-github-godbus-dbus-develUpgrade golist-debuginfoUpgrade runc-debuginfoUpgrade golang-googlecode-sqlite-develUpgrade golistUpgrade golang-github-gorilla-context-develUpgrade golang-docsUpgrade golang-github-gorilla-mux-develUpgrade go-srpm-macrosUpgrade go-rpm-macrosUpgrade golang-github-syndtr-gocapability-develUpgrade golang-miscUpgrade go-rpm-templatesUpgrade golang-testsUpgrade runcUpgrade golangUpgrade golang-race | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-miscUpgrade golang-raceUpgrade golangUpgrade golang-docsUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golist-debuginfoUpgrade golang-sharedUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golistUpgrade golang-github-cpuguy83-md2man | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade delve-debugsourceUpgrade podman-dockerUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade git-lfsUpgrade grafana-debuginfoUpgrade grafanaUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade crunUpgrade podman-testsUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-pluginsUpgrade conmonUpgrade cockpit-podmanUpgrade golang-miscUpgrade conmon-debugsourceUpgrade grafana-pcp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-libsUpgrade golang-raceUpgrade toolboxUpgrade skopeo-debuginfoUpgrade python3-podmanUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade delveUpgrade libslirpUpgrade podman-remote-debuginfoUpgrade critUpgrade buildahUpgrade grafana-pcpUpgrade delve-debuginfoUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade container-selinuxUpgrade skopeo-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade runcUpgrade golang-srcUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade golang-binUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-toolsetUpgrade buildah-debuginfoUpgrade libslirp-develUpgrade criuUpgrade toolbox-debuginfoUpgrade crun-debugsourceUpgrade udicaUpgrade golang-docsUpgrade git-lfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade python3-criuUpgrade golangUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Oracle_linux | — | Upgrade golang-testsUpgrade skopeoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-remoteUpgrade golangUpgrade udicaUpgrade runcUpgrade critUpgrade podmanUpgrade golang-docsUpgrade golang-miscUpgrade criu-libsUpgrade skopeo-testsUpgrade python3-criuUpgrade podman-pluginsUpgrade grafana-pcpUpgrade fuse-overlayfsUpgrade golang-binUpgrade delveUpgrade podman-catatonitUpgrade criuUpgrade golang-srcUpgrade buildah-testsUpgrade podman-testsUpgrade cockpit-podmanUpgrade git-lfsUpgrade golang-raceUpgrade podman-gvproxyUpgrade crunUpgrade slirp4netnsUpgrade libslirpUpgrade go-toolsetUpgrade grafanaUpgrade conmonUpgrade python3-podmanUpgrade buildahUpgrade podman-dockerUpgrade netavarkUpgrade container-selinux | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade delveUpgrade python3-podmanUpgrade go-toolsetUpgrade cockpit-podmanUpgrade golang-miscUpgrade conmon-debugsourceUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade golang-raceUpgrade toolbox-testsUpgrade buildah-testsUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade git-lfs-debugsourceUpgrade grafana-pcp-debuginfoUpgrade criu-debuginfoUpgrade netavarkUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade podman-dockerUpgrade podman-pluginsUpgrade grafanaUpgrade slirp4netnsUpgrade git-lfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade crunUpgrade podman-gvproxyUpgrade criu-develUpgrade critUpgrade git-lfs-debuginfoUpgrade podman-debugsourceUpgrade podmanUpgrade aardvark-dnsUpgrade python3-criuUpgrade skopeoUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade golang-docsUpgrade container-selinuxUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade golang-srcUpgrade grafana-debuginfoUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoNo solution existsUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade runcUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade delve-debuginfoUpgrade udicaUpgrade criu-libsUpgrade golang-testsUpgrade crun-debugsource | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debuginfoUpgrade podman-remoteUpgrade python3-criuUpgrade git-lfs-debuginfoUpgrade buildahUpgrade grafana-pcpUpgrade skopeo-testsUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade runcUpgrade podman-debuginfoUpgrade grafanaUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade delveUpgrade slirp4netns-debugsourceUpgrade criu-debugsourceUpgrade criu-libsUpgrade critUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade delve-debuginfoUpgrade git-lfs-debugsourceUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade golang-binUpgrade skopeo-debugsourceUpgrade podmanUpgrade libslirpUpgrade criuUpgrade conmon-debugsourceUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade crunUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade grafana-pcp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade criu-develUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debugsourceUpgrade conmonUpgrade buildah-debugsourceUpgrade golangUpgrade grafana-debuginfoUpgrade skopeoUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-plugins | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18-opensslUpgrade go1.18-raceUpgrade go1.18Upgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.17Upgrade go1.18-docUpgrade go1.17-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.18-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub