Moderate: gvisor-tap-vsock security and bug fix update

2024-06-1100:00:00

errata.almalinux.org

gvisor-tap-vsock

security

bug fix

networking

podman-machine

libslirp

vpnkit

golang

request.parsemultipartform

cve-2023-45290

dns server

port forwarding

virtual machines

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

OSVersionArchitecturePackageVersionFilename
almalinux9x86_64gvisor-tap-vsock< 0.7.3-3.el9_4.alma.1gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.x86_64.rpm
almalinux9aarch64gvisor-tap-vsock< 0.7.3-3.el9_4.alma.1gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.aarch64.rpm
almalinux9ppc64legvisor-tap-vsock< 0.7.3-3.el9_4.alma.1gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.ppc64le.rpm
almalinux9s390xgvisor-tap-vsock< 0.7.3-3.el9_4.alma.1gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	x86_64	gvisor-tap-vsock	< 0.7.3-3.el9_4.alma.1	gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.x86_64.rpm
almalinux	9	aarch64	gvisor-tap-vsock	< 0.7.3-3.el9_4.alma.1	gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.aarch64.rpm
almalinux	9	ppc64le	gvisor-tap-vsock	< 0.7.3-3.el9_4.alma.1	gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.ppc64le.rpm
almalinux	9	s390x	gvisor-tap-vsock	< 0.7.3-3.el9_4.alma.1	gvisor-tap-vsock-0.7.3-3.el9_4.alma.1.s390x.rpm