os: RemoveAll susceptible to symlink race [1.22 backport]
gopherbot opened this issue · 2 comments
gopherbot commented
@rolandshoemaker requested issue #52745 to be considered for backport to the next 1.22 minor release.
@gopherbot please open backport issues for this, it's a security hardening issue which fixes a long running TOCTOU race.
gopherbot commented
Change https://go.dev/cl/589056 mentions this issue: [release-branch.go1.22] os: RemoveAll: fix symlink race for unix