Release gvisor-tap-vsock-0.8.5-1.el9_6 ALSA-2025:7416

gvisor-tap-vsock security update
Severity: Important
Description
A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected packages:
gvisor-tap-vsock-0.8.5-1.el9_6.x86_64
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.x86_64
gvisor-tap-vsock-0.8.5-1.el9_6.s390x
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.s390x
gvisor-tap-vsock-0.8.5-1.el9_6.ppc64le
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.ppc64le
gvisor-tap-vsock-0.8.5-1.el9_6.aarch64
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.aarch64