Rebuild for CVE fixes

Rebuilding gvisor-tap-vsock with a newer version of the golang compiler
will ensure these CVEs are fixed: CVE-2025-68121, CVE-2025-61729, CVE-2025-61728, CVE-2025-61729
They may or may not impact gvisor-tap-vsock.
This commit is contained in:
Christophe Fergeau 2026-03-11 13:51:57 +01:00
parent 6fc209da65
commit f45dc05265

View File

@ -27,7 +27,7 @@ Epoch: 6
# If you're reading this on dist-git, the version is automatically filled in by Packit.
Version: 0.8.7
License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
Release: 1%{?dist}
Release: 2%{?dist}
%if %{defined golang_arches_future}
ExclusiveArch: %{golang_arches_future}
%else
@ -115,6 +115,14 @@ install -p -m0755 bin/gvforwarder %{buildroot}%{_gvisor_installdir}
%{_gvisor_installdir}/gvforwarder
%changelog
* Wed Mar 11 2026 Christophe Fergeau <cfergeau@redhat.com> - 6:0.8.7-2
- rebuild for CVE-2025-68121, CVE-2025-61726, CVE-2025-61729, CVE-2025-61728, CVE-2025-61729
- Resolves: RHEL-140518
- Resolves: RHEL-145414
- Resolves: RHEL-146723
- Resolves: RHEL-146928
- Resolves: RHEL-149248
* Fri Aug 29 2025 Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
- update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
- Resolves: RHEL-111948