Release gvisor-tap-vsock-0.8.5-1.el9_6 ALSA-2025:7416
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
gvisor-tap-vsock security update
Severity: Important
Description
A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.
Security Fix(es):
* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
gvisor-tap-vsock-0.8.5-1.el9_6.x86_64
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.x86_64
gvisor-tap-vsock-0.8.5-1.el9_6.s390x
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.s390x
gvisor-tap-vsock-0.8.5-1.el9_6.ppc64le
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.ppc64le
gvisor-tap-vsock-0.8.5-1.el9_6.aarch64
gvisor-tap-vsock-gvforwarder-0.8.5-1.el9_6.aarch64
Contributor guide
Assessment
This issue has not been assessed yet.