You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -59,8 +60,31 @@ Early versions prior to v0.2.x | End of Life (Jan 5, 2019)
59
60
60
61
See https://github.com/rootless-containers/slirp4netns/releases for the releases.
61
62
63
+
### Security advisories
62
64
See https://github.com/rootless-containers/slirp4netns/security/advisories for the past security advisories.
63
65
66
+
:warning: We had been collecting [the vulnerabilities of QEMU/libslirp](https://www.cvedetails.com/product/57329/Libslirp-Project-Libslirp.html?vendor_id=20192) in this slirp4netns repo until the end of 2020,
67
+
as the slirp4netns releases prior to v1.0.0 were always statically linked with a specific version of QEMU/libslirp.
68
+
Starting with 2021, the vulnerabilities of libslirp are no longer collected in this slirp4netns repo, as slirp4netns >= v1.0.0 can be linked with an arbitrary version of libslirp.
69
+
70
+
<details>
71
+
<summary> Run <code>slirp4netns --version</code> to check the version of the linked libslirp. </summary>
0 commit comments