Skip to content
OpenAdvisories
Medium ELSA-2024-6187 1 CVE

Moderate: gvisor-tap-vsock security update (Oracle Linux 9)

Published Sep 3, 2024 · Updated Sep 3, 2024

Ecosystem: Oracle Linux

Summary

[6:0.7.3-5]
- rebuild for CVE-2024-24783
- Resolves: RHEL-28435

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 gvisor-tap-vsock 6:0.7.3-5.el9_4

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-24783

    Verify panics on certificates with an unknown public key algorithm in crypto/x509

    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go