gvisor-tap-vsock security and bug fix update

2024-06-1414:00:40

Rockylinux Product Errata

errata.rockylinux.org

gvisor-tap-vsock

security update

rocky linux 9

cve-2023-45290 fix

memory exhaustion

request.parsemultipartform

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

An update is available for gvisor-tap-vsock.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

OSVersionArchitecturePackageVersionFilename
rocky9aarch64gvisor-tap-vsock< 0.7.3-3.el9_4gvisor-tap-vsock-6:0.7.3-3.el9_4.aarch64.rpm
rocky9ppc64legvisor-tap-vsock< 0.7.3-3.el9_4gvisor-tap-vsock-6:0.7.3-3.el9_4.ppc64le.rpm
rocky9s390xgvisor-tap-vsock< 0.7.3-3.el9_4gvisor-tap-vsock-6:0.7.3-3.el9_4.s390x.rpm
rocky9x86_64gvisor-tap-vsock< 0.7.3-3.el9_4gvisor-tap-vsock-6:0.7.3-3.el9_4.x86_64.rpm
rocky9aarch64gvisor-tap-vsock-debuginfo< 0.7.3-3.el9_4gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.aarch64.rpm
rocky9ppc64legvisor-tap-vsock-debuginfo< 0.7.3-3.el9_4gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.ppc64le.rpm
rocky9s390xgvisor-tap-vsock-debuginfo< 0.7.3-3.el9_4gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.s390x.rpm
rocky9x86_64gvisor-tap-vsock-debuginfo< 0.7.3-3.el9_4gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.x86_64.rpm
rocky9aarch64gvisor-tap-vsock-debugsource< 0.7.3-3.el9_4gvisor-tap-vsock-debugsource-6:0.7.3-3.el9_4.aarch64.rpm
rocky9ppc64legvisor-tap-vsock-debugsource< 0.7.3-3.el9_4gvisor-tap-vsock-debugsource-6:0.7.3-3.el9_4.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	9	aarch64	gvisor-tap-vsock	< 0.7.3-3.el9_4	gvisor-tap-vsock-6:0.7.3-3.el9_4.aarch64.rpm
rocky	9	ppc64le	gvisor-tap-vsock	< 0.7.3-3.el9_4	gvisor-tap-vsock-6:0.7.3-3.el9_4.ppc64le.rpm
rocky	9	s390x	gvisor-tap-vsock	< 0.7.3-3.el9_4	gvisor-tap-vsock-6:0.7.3-3.el9_4.s390x.rpm
rocky	9	x86_64	gvisor-tap-vsock	< 0.7.3-3.el9_4	gvisor-tap-vsock-6:0.7.3-3.el9_4.x86_64.rpm
rocky	9	aarch64	gvisor-tap-vsock-debuginfo	< 0.7.3-3.el9_4	gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.aarch64.rpm
rocky	9	ppc64le	gvisor-tap-vsock-debuginfo	< 0.7.3-3.el9_4	gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.ppc64le.rpm
rocky	9	s390x	gvisor-tap-vsock-debuginfo	< 0.7.3-3.el9_4	gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.s390x.rpm
rocky	9	x86_64	gvisor-tap-vsock-debuginfo	< 0.7.3-3.el9_4	gvisor-tap-vsock-debuginfo-6:0.7.3-3.el9_4.x86_64.rpm
rocky	9	aarch64	gvisor-tap-vsock-debugsource	< 0.7.3-3.el9_4	gvisor-tap-vsock-debugsource-6:0.7.3-3.el9_4.aarch64.rpm
rocky	9	ppc64le	gvisor-tap-vsock-debugsource	< 0.7.3-3.el9_4	gvisor-tap-vsock-debugsource-6:0.7.3-3.el9_4.ppc64le.rpm