Skip to content
OpenAdvisories
Medium ELSA-2024-3830 1 CVE

Moderate: gvisor-tap-vsock security and bug fix update (Oracle Linux 9)

Published Jun 12, 2024 · Updated Jun 12, 2024

Ecosystem: Oracle Linux

Summary

[6:0.7.3-3]
- rebuild for CVE-2023-45290
- Resolves: RHEL-28388

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 gvisor-tap-vsock 6:0.7.3-3.el9_4

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-45290

    Memory exhaustion in multipart form parsing in net/textproto and net/http

    When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while readi…

    Go standard library net/textproto golang go Debian Ubuntu Azure Linux Alpine Wolfi Go