os: RemoveAll susceptible to symlink race [1.21 backport]
gopherbot opened this issue · 2 comments
gopherbot commented
@rolandshoemaker requested issue #52745 to be considered for backport to the next 1.21 minor release.
@gopherbot please open backport issues for this, it's a security hardening issue which fixes a long running TOCTOU race.
gopherbot commented
Change https://go.dev/cl/589057 mentions this issue: [release-branch.go1.21] os: RemoveAll: fix symlink race for unix