Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2025-9150

Опубликовано: 16 июн. 2025
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2025-9150: gvisor-tap-vsock security update (MODERATE)

[6:0.8.5-2]

  • rebuild for CVE-2025-22871
  • Resolves: RHEL-90038

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

gvisor-tap-vsock

0.8.5-2.el9_6

gvisor-tap-vsock-gvforwarder

0.8.5-2.el9_6

Oracle Linux x86_64

gvisor-tap-vsock

0.8.5-2.el9_6

gvisor-tap-vsock-gvforwarder

0.8.5-2.el9_6

Связанные CVE

Связанные уязвимости

CVSS3: 9.1
ubuntu
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 5.4
redhat
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
nvd
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
msrc
2 месяца назад

Описание отсутствует

CVSS3: 9.1
debian
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator ...