Moderate: containernetworking-plugins security and bug fix update

2024-06-1100:00:00

errata.almalinux.org

container network interface

cni

security fix

linux containers

network connectivity

cve-2023-45290

golang

memory exhaustion

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.

Security Fix(es):

golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

OSVersionArchitecturePackageVersionFilename
almalinux9ppc64lecontainernetworking-plugins< 1.4.0-3.el9_4containernetworking-plugins-1.4.0-3.el9_4.ppc64le.rpm
almalinux9aarch64containernetworking-plugins< 1.4.0-3.el9_4containernetworking-plugins-1.4.0-3.el9_4.aarch64.rpm
almalinux9x86_64containernetworking-plugins< 1.4.0-3.el9_4containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm
almalinux9s390xcontainernetworking-plugins< 1.4.0-3.el9_4containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	ppc64le	containernetworking-plugins	< 1.4.0-3.el9_4	containernetworking-plugins-1.4.0-3.el9_4.ppc64le.rpm
almalinux	9	aarch64	containernetworking-plugins	< 1.4.0-3.el9_4	containernetworking-plugins-1.4.0-3.el9_4.aarch64.rpm
almalinux	9	x86_64	containernetworking-plugins	< 1.4.0-3.el9_4	containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm
almalinux	9	s390x	containernetworking-plugins	< 1.4.0-3.el9_4	containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm