When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that sensitive file. To fix that, glog now causes the program to exit (with status code 2) when it finds that the configured log file already exists.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade golang-glog | Feb 20, 2025 | Jan 28, 2025 |
| Redhat Openshift | — | Upgrade ose-agent-installer-csr-approver-rhel8Upgrade ose-agent-installer-api-server-rhel8Upgrade ose-sriov-dp-admission-controller-rhel9Upgrade ose-network-metrics-daemon-rhel9Upgrade ose-ptpUpgrade ose-multus-admission-controllerUpgrade metallb-rhel8-operatorUpgrade metallb-rhel8Upgrade ose-ibm-vpc-block-csi-driver-rhel8Upgrade ose-multus-admission-controller-rhel9Upgrade ose-sriov-network-webhook-rhel9Upgrade kubevirt-csi-driver-rhel8Upgrade ose-machine-config-operatorUpgrade ose-agent-installer-api-server-rhel9Upgrade ose-cloud-credential-rhel9-operatorUpgrade ose-ptp-operatorUpgrade ose-corednsUpgrade ose-ptp-rhel9Upgrade ose-sriov-network-device-plugin-rhel9Upgrade ingress-node-firewall-rhel9Upgrade ose-agent-installer-node-agent-rhel9Upgrade ose-sriov-network-device-pluginUpgrade ose-network-metrics-daemon-rhel8Upgrade ose-agent-installer-node-agent-rhel8Upgrade metallb-rhel9-operatorUpgrade ose-sriov-network-webhookUpgrade ose-sriov-dp-admission-controller | Aug 10, 2026 | Jan 28, 2025 |
| Suse | — | Upgrade govulncheck-vulndbUpgrade google-osconfig-agentUpgrade grafana | Dec 5, 2025 | Jun 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub