RED HATVERIFIED
Red Hat Security Advisory: gvisor-tap-vsock security update
Checked 4 Oct 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
SECURITY ADVISORYRED HATVERIFIED
PUBLISHER UPDATE · RHSA-2026-9108
RHSA-2026-9108 release notes and known issues
Red Hat Security Advisory: gvisor-tap-vsock security update
Scope: Red Hat Enterprise Linux. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
An update for gvisor-tap-vsock is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Red Hat Enterprise Linux
Affected versions
- Red Hat Enterprise Linux AppStream EUS (v.9.6)
- gvisor-tap-vsock-6:0.8.5-2.el9_6.1.src
- gvisor-tap-vsock-6:0.8.5-2.el9_6.1.aarch64
- gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.1.aarch64
- gvisor-tap-vsock-debugsource-6:0.8.5-2.el9_6.1.aarch64
- gvisor-tap-vsock-debuginfo-6:0.8.5-2.el9_6.1.aarch64
- gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-2.el9_6.1.aarch64
- gvisor-tap-vsock-6:0.8.5-2.el9_6.1.ppc64le
- gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.1.ppc64le
- gvisor-tap-vsock-debugsource-6:0.8.5-2.el9_6.1.ppc64le
- gvisor-tap-vsock-debuginfo-6:0.8.5-2.el9_6.1.ppc64le
- gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-2.el9_6.1.ppc64le
- gvisor-tap-vsock-6:0.8.5-2.el9_6.1.x86_64
- gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.1.x86_64
- gvisor-tap-vsock-debugsource-6:0.8.5-2.el9_6.1.x86_64
- gvisor-tap-vsock-debuginfo-6:0.8.5-2.el9_6.1.x86_64
- gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-2.el9_6.1.x86_64
- gvisor-tap-vsock-6:0.8.5-2.el9_6.1.s390x
- gvisor-tap-vsock-gvforwarder-6:0.8.5-2.el9_6.1.s390x
- gvisor-tap-vsock-debugsource-6:0.8.5-2.el9_6.1.s390x
- gvisor-tap-vsock-debuginfo-6:0.8.5-2.el9_6.1.s390x
- gvisor-tap-vsock-gvforwarder-debuginfo-6:0.8.5-2.el9_6.1.s390x
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Apply the Red Hat updates listed in the official advisory.