Red Hat Security Advisory

RHSA-2025:23851

go-rpm-macros security update

Released 2025-12-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) go-filesystem-3.0.9-12.el9_0, go-rpm-macros-3.0.9-12.el9_0, go-rpm-templates-3.0.9-12.el9_0 +1

Fixes 1 record

TI-2025-30310 CVE-2025-47906 · GHSA-gwrf-jf3h-w649

Unexpected paths returned from LookPath in os/exec

LOW 30

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpecte…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0055 Published 2025-09-18 Partial fix · 1.23.12, 1.24.6