Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade grafanaUpgrade libslirpUpgrade aardvark-dnsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade criu-develUpgrade podman-testsUpgrade container-selinuxUpgrade git-lfsUpgrade slirp4netnsUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade buildah-testsUpgrade go-toolsetUpgrade libslirp-develUpgrade criu-libsUpgrade cockpit-podmanUpgrade podmanUpgrade golang-binUpgrade podman-catatonitUpgrade golang-miscUpgrade toolbox-testsUpgrade runcUpgrade golangUpgrade golang-raceUpgrade golang-docsUpgrade grafana-pcpUpgrade netavarkUpgrade crunUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade skopeoUpgrade golang-testsUpgrade podman-pluginsUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade critUpgrade udicaUpgrade buildahUpgrade toolboxUpgrade criuUpgrade conmonUpgrade golang-src | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade go-filesystemUpgrade runc-debuginfoUpgrade golang-googlecode-sqlite-develUpgrade golistUpgrade golang-github-godbus-dbus-develUpgrade golang-googlecode-net-develUpgrade golang-github-kr-pty-develUpgrade golang-sharedUpgrade golist-debuginfoUpgrade golang-srcUpgrade golang-github-gorilla-context-develUpgrade go-srpm-macrosUpgrade go-rpm-templatesUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-macrosUpgrade golang-docsUpgrade golang-miscUpgrade golang-github-syndtr-gocapability-develUpgrade golangUpgrade runcUpgrade golang-raceUpgrade golang-tests | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-sharedUpgrade golistUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-raceUpgrade golang-testsUpgrade golang-miscUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-binUpgrade golang | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade delve-debugsourceUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade podman-dockerUpgrade slirp4netnsUpgrade toolbox-testsUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade python3-podmanUpgrade golang-miscUpgrade git-lfs-debugsourceUpgrade criu-debuginfoUpgrade crunUpgrade podman-pluginsUpgrade grafanaUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade delveUpgrade libslirpUpgrade conmonUpgrade criu-develUpgrade fuse-overlayfsUpgrade git-lfsUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade podman-catatonit-debuginfoUpgrade grafana-debuginfoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade grafana-pcp-debuginfoUpgrade criu-libsUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade criuUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade libslirp-develUpgrade skopeo-debugsourceUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade grafana-pcpUpgrade golangUpgrade buildah-testsUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade critUpgrade golang-srcUpgrade podman-remoteUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade git-lfs-debuginfoUpgrade crun-debugsourceUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade buildahUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade skopeoUpgrade runcUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade fuse-overlayfsUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade python3-criuUpgrade golang-binUpgrade golang-srcUpgrade criu-develUpgrade aardvark-dnsUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade critUpgrade golang-miscUpgrade podman-remoteUpgrade libslirp-develUpgrade podmanUpgrade runcUpgrade criuUpgrade delveUpgrade grafana-pcpUpgrade podman-pluginsUpgrade udicaUpgrade podman-catatonitUpgrade python3-podmanUpgrade podman-dockerUpgrade slirp4netnsUpgrade git-lfsUpgrade golang-raceUpgrade podman-testsUpgrade buildah-testsUpgrade go-toolsetUpgrade grafanaUpgrade cockpit-podmanUpgrade netavarkUpgrade podman-gvproxyUpgrade container-selinuxUpgrade buildahUpgrade conmonUpgrade libslirpUpgrade crun | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade grafana-pcpUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade skopeoUpgrade grafana-debuginfoUpgrade libslirp-debugsourceUpgrade golang-binUpgrade delve-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golang-srcUpgrade critUpgrade fuse-overlayfsUpgrade slirp4netns-debuginfoUpgrade git-lfs-debuginfoUpgrade libslirp-debuginfoUpgrade podmanUpgrade criuUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade runcUpgrade podman-debugsourceUpgrade podman-remoteUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade podman-remote-debuginfoUpgrade golangUpgrade buildahUpgrade criu-libsUpgrade delve-debuginfoUpgrade golang-testsNo solution existsUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade golang-docsUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade buildah-testsUpgrade libslirpUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade netavarkUpgrade go-toolsetUpgrade delveUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade golang-miscUpgrade conmon-debugsourceUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade crunUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade python3-podmanUpgrade grafanaUpgrade git-lfs-debugsourceUpgrade podman-dockerUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade grafana-pcp-debuginfoUpgrade git-lfsUpgrade fuse-overlayfs-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade runcUpgrade delveUpgrade criu-libsUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade grafanaUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade git-lfsUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade git-lfs-debuginfoUpgrade runc-debugsourceUpgrade critUpgrade buildahUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade grafana-pcpUpgrade containernetworking-pluginsUpgrade skopeoUpgrade golang-binUpgrade criu-debuginfoUpgrade libslirpUpgrade crun-debugsourceUpgrade toolboxUpgrade criu-develUpgrade containers-commonUpgrade grafana-pcp-debuginfoUpgrade golang-raceUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonitUpgrade git-lfs-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-pluginsUpgrade grafana-debuginfoUpgrade conmonUpgrade toolbox-debugsourceUpgrade golangUpgrade buildah-debugsourceUpgrade crunUpgrade podman-remote-debuginfoUpgrade delve-debuginfoUpgrade podmanUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18Upgrade go1.18-opensslUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.17Upgrade go1.18-docUpgrade go1.17-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.13-goUpgrade golang-1.18Upgrade golang-1.18-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-srcUpgrade golang-1.13 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub