RLSA-2024:3830

See a problem?
Please try reporting it to the source first.
Source
https://errata.rockylinux.org/RLSA-2024:3830
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2024:3830.json
JSON Data
https://api.test.osv.dev/v1/vulns/RLSA-2024:3830
Related
Published
2024-06-14T14:00:40.182624Z
Modified
2024-06-14T14:02:44.504839Z
Summary
Moderate: gvisor-tap-vsock security and bug fix update
Details

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for podman-machine virtual machines. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

  • golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:9 / gvisor-tap-vsock

Package

Name
gvisor-tap-vsock
Purl
pkg:rpm/rocky-linux/gvisor-tap-vsock?distro=rocky-linux-9&epoch=6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6:0.7.3-3.el9_4