Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golang-sharedUpgrade golang-binUpgrade golang-docs | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade openshiftUpgrade cri-toolsUpgrade cri-oUpgrade ose-crio-credential-provider | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade ignition-edgeUpgrade buildah-testsUpgrade git-lfs-debugsourceUpgrade podman-catatonitUpgrade grafana-pcp-debuginfoUpgrade python3-podmanUpgrade rhc-debugsourceUpgrade golang-srcUpgrade runc-debugsourceUpgrade criu-libsUpgrade containers-commonUpgrade libslirp-develUpgrade golang-raceUpgrade flightctl-cliUpgrade podmanUpgrade grafana-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade fuse-overlayfsUpgrade ignition-grubUpgrade conmonUpgrade delve-debuginfoUpgrade rhc-worker-playbook-debuginfoUpgrade osbuild-composer-debuginfoUpgrade toolbox-testsUpgrade git-lfs-debuginfoUpgrade skopeoUpgrade aardvark-dnsUpgrade go-fdo-server-ownerUpgrade skopeo-debugsourceUpgrade netavarkUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade buildahUpgrade criu-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade go-fdo-client-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade ignitionUpgrade rhc-worker-playbookUpgrade go-fdo-server-debuginfoUpgrade cockpit-podmanUpgrade toolboxUpgrade libslirpUpgrade go-fdo-server-manufacturerUpgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade go-fdo-clientUpgrade ignition-debuginfoUpgrade buildah-debuginfoUpgrade golang-miscUpgrade osbuild-composer-tests-debuginfoUpgrade slirp4netnsUpgrade image-builder-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade image-builderUpgrade fuse-overlayfs-debuginfoUpgrade go-fdo-client-debuginfoUpgrade golangUpgrade golang-testsUpgrade grafana-selinuxUpgrade osbuild-composer-coreUpgrade osbuild-composer-dnf-jsonUpgrade ignition-validateUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debuginfoUpgrade runcUpgrade skopeo-testsUpgrade go-fdo-serverUpgrade osbuild-composer-worker-debuginfoUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade go-fdo-server-rendezvousUpgrade ipp-usbUpgrade osbuild-composer-debugsourceUpgrade rhc-debuginfoUpgrade opentelemetry-collectorUpgrade rhcUpgrade podman-testsUpgrade podman-remoteUpgrade criu-develUpgrade go-toolsetNo solution existsUpgrade golang-docsUpgrade udicaUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debuginfoUpgrade rhc-develUpgrade osbuild-composer-workerUpgrade ipp-usb-debuginfoUpgrade golang-binUpgrade git-lfsUpgrade flightctl-selinuxUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade grafanaUpgrade flightctl-servicesUpgrade grafana-debugsourceUpgrade container-selinuxUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade critUpgrade osbuild-composerUpgrade grafana-pcp-debugsourceUpgrade ignition-debugsourceUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade delveUpgrade libslirp-debuginfoUpgrade ignition-validate-debuginfoUpgrade image-builder-debuginfoUpgrade go-fdo-server-debugsourceUpgrade crunUpgrade flightctl-observabilityUpgrade podman-dockerUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade flightctl-agentUpgrade containernetworking-plugins-debuginfo | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade runc-debuginfoUpgrade criu-debugsourceUpgrade osbuild-composer-workerUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade runc-debugsourceUpgrade opentelemetry-collectorUpgrade ipp-usb-debuginfoUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade slirp4netnsUpgrade grafana-pcpUpgrade libslirp-develUpgrade go-fdo-serverUpgrade git-lfs-debuginfoUpgrade grafanaUpgrade skopeo-testsUpgrade osbuild-composer-debuginfoUpgrade crunUpgrade critUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade podman-remoteUpgrade buildah-testsUpgrade python3-criuUpgrade delveUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade git-lfsUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade osbuild-composerUpgrade runcUpgrade skopeo-debuginfoUpgrade grafana-debugsourceUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade ipp-usbUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade criu-develUpgrade osbuild-composer-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade fuse-overlayfsUpgrade osbuild-composer-core-debuginfoUpgrade golangUpgrade go-fdo-server-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade toolboxUpgrade golang-raceUpgrade netavarkUpgrade skopeoUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade image-builder-debuginfoUpgrade conmonUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade podmanUpgrade image-builder-debugsourceUpgrade grafana-debuginfoUpgrade go-fdo-server-debugsourceUpgrade delve-debuginfoUpgrade grafana-pcp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade podman-testsUpgrade fuse-overlayfs-debugsourceUpgrade go-fdo-clientUpgrade image-builderUpgrade golang-binUpgrade go-fdo-client-debugsourceUpgrade git-lfs-debugsourceUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade osbuild-composer-coreUpgrade grafana-selinuxUpgrade grafana-pcp-debuginfoUpgrade go-fdo-client-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-tests | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub