tocsin

Alpine/go: high 7.8

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For ex

Action: Upgrade go to 1.26.8-r0 or later.

Affected

introducedfixedlast affected
1.24.01.26.8-r0-

Fixed versions

1.26.8-r0

Sources

published · modified · JSON