[Apollo] Advisories Statistics light light Login

RLBA-2025:0920

Bug Fix Mirrored from RHBA-2025:0920
Issued at: 2025-03-17
Updated at: 2025-03-17

Synopsis

passt bug fix update



Description

passt implements a translation layer between a Layer-2 network interface and native Layer-4 sockets (TCP, UDP, ICMP/ICMPv6 echo) on a host. It doesn't require any capabilities or privileges, and it can be used as a simple replacement for Slirp. pasta (same binary as passt, different command) offers equivalent functionality, for network namespaces: traffic is forwarded using a tap interface inside the namespace, without the need to create further interfaces on the host, hence not requiring any capabilities or privileges.

Bug Fix(es):

* [Pasta] TCP keepalive causes connection reset [rhel-9.5.z] (JIRA:Rocky Linux-68948)

* Poor Performance with Pasta for rootless container when compared with slirp4netns [rhel-9.5.z] (JIRA:Rocky Linux-73251)

* pasta fails to associate container packets to existing flow, connection data is discarded [rhel-9.5.z] (JIRA:Rocky Linux-74301)

* Issues with Camel-Quarkus Integration in Podman Container Post-Upgrade (Podman 4.9 → 5.2) based on Pasta networking [rhel-9.5.z] (JIRA:Rocky Linux-75645)



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes



CVEs

Affected packages

Rocky Linux 9 aarch64 - AppStream

passt-0:0^20240806.gee36266-6.el9_5.aarch64.rpm passt-0:0^20240806.gee36266-6.el9_5.src.rpm passt-debuginfo-0:0^20240806.gee36266-6.el9_5.aarch64.rpm passt-debugsource-0:0^20240806.gee36266-6.el9_5.aarch64.rpm passt-selinux-0:0^20240806.gee36266-6.el9_5.noarch.rpm

Rocky Linux 9 ppc64le - AppStream

passt-0:0^20240806.gee36266-6.el9_5.ppc64le.rpm passt-0:0^20240806.gee36266-6.el9_5.src.rpm passt-debuginfo-0:0^20240806.gee36266-6.el9_5.ppc64le.rpm passt-debugsource-0:0^20240806.gee36266-6.el9_5.ppc64le.rpm passt-selinux-0:0^20240806.gee36266-6.el9_5.noarch.rpm

Rocky Linux 9 s390x - AppStream

passt-0:0^20240806.gee36266-6.el9_5.s390x.rpm passt-0:0^20240806.gee36266-6.el9_5.src.rpm passt-debuginfo-0:0^20240806.gee36266-6.el9_5.s390x.rpm passt-debugsource-0:0^20240806.gee36266-6.el9_5.s390x.rpm passt-selinux-0:0^20240806.gee36266-6.el9_5.noarch.rpm

Rocky Linux 9 x86_64 - AppStream

passt-0:0^20240806.gee36266-6.el9_5.src.rpm passt-0:0^20240806.gee36266-6.el9_5.x86_64.rpm passt-debuginfo-0:0^20240806.gee36266-6.el9_5.x86_64.rpm passt-debugsource-0:0^20240806.gee36266-6.el9_5.x86_64.rpm passt-selinux-0:0^20240806.gee36266-6.el9_5.noarch.rpm