[Apollo] Advisories Statistics light light Login

RLSA-2025:7416

Security Mirrored from RHSA-2025:7416
Issued at: 2025-07-29
Updated at: 2025-07-29

Synopsis

Important: gvisor-tap-vsock security update



Description

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding.

Security Fix(es):

* golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (CVE-2025-22869)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2348367

CVEs

CVE-2025-22869

Affected packages

Rocky Linux 9 aarch64 - AppStream

gvisor-tap-vsock-6:0.8.5-1.el9_5.aarch64.rpm gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.aarch64.rpm gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.aarch64.rpm gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.aarch64.rpm gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

gvisor-tap-vsock-6:0.8.5-1.el9_5.ppc64le.rpm gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.ppc64le.rpm gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.ppc64le.rpm gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.ppc64le.rpm gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

gvisor-tap-vsock-6:0.8.5-1.el9_5.s390x.rpm gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.s390x.rpm gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.s390x.rpm gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.s390x.rpm gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

gvisor-tap-vsock-6:0.8.5-1.el9_5.src.rpm gvisor-tap-vsock-6:0.8.5-1.el9_5.x86_64.rpm gvisor-tap-vsock-debuginfo-6:0.8.5-1.el9_5.x86_64.rpm gvisor-tap-vsock-debugsource-6:0.8.5-1.el9_5.x86_64.rpm gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_5.x86_64.rpm gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-1.el9_5.x86_64.rpm