Lucene search

K
redhatRedHatRHSA-2024:3830
HistoryJun 11, 2024 - 6:27 p.m.

(RHSA-2024:3830) Moderate: gvisor-tap-vsock security and bug fix update

2024-06-1118:27:28
access.redhat.com
6
gvisor-tap-vsock
update
golang
security fix
cve-2023-45290
network stack
podman-machine
dns server
port forwarding
bug fix
libslirp replacement

AI Score

7.3

Confidence

Low

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

  • golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)