—
GO-2020-0027
Privilege escalation in github.com/google/fscrypt
Quick fix
GO-2020-0027 — github.com/google/fscrypt: upgrade to the fixed version with the command below.
go get github.com/google/fscrypt@v0.2.4Details
After dropping and then elevating process privileges euid, guid, and groups are not properly restored to their original values, allowing an unprivileged user to gain membership in the root group.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/google/fscrypt
Introduced in:
0Fixed in: 0.2.4Fix
go get github.com/google/fscrypt@v0.2.4