Issued at: 2025-07-29
Updated at: 2025-07-29
Synopsis
Important: gvisor-tap-vsock security update
Description
A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.
Security Fix(es):
* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 aarch64
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2348367
CVEs
CVE-2025-22869
Affected packages
Rocky Linux 9 aarch64 - AppStream
gvisor-tap-vsock-6:0.8.5-1.el9_5.aarch64.rpm
gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm
gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.aarch64.rpm
gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.aarch64.rpm
gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.aarch64.rpm
gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.aarch64.rpm
Rocky Linux 9 ppc64le - AppStream
gvisor-tap-vsock-6:0.8.5-1.el9_5.ppc64le.rpm
gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm
gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.ppc64le.rpm
gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.ppc64le.rpm
gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.ppc64le.rpm
gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.ppc64le.rpm
Rocky Linux 9 s390x - AppStream
gvisor-tap-vsock-6:0.8.5-1.el9_5.s390x.rpm
gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm
gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.s390x.rpm
gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.s390x.rpm
gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.s390x.rpm
gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.s390x.rpm
Rocky Linux 9 x86_64 - AppStream
gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm
gvisor-tap-vsock-6:0.8.5-1.el9_5.x86_64.rpm
gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.x86_64.rpm
gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.x86_64.rpm
gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.x86_64.rpm
gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.x86_64.rpm