[ALSA-2024:9089] Moderate: containernetworking-plugins security update
Type:
security
Severity:
moderate
Release date:
2024-11-18
Description:
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788) * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 containernetworking-plugins-1.5.1-2.el9.aarch64.rpm 88f25353880b42f704dc229f580a5c27d1f861c8d1c0367a016ab668f512fc60
ppc64le containernetworking-plugins-1.5.1-2.el9.ppc64le.rpm 2fb7a48eaf1d2e6109cce8b81e94c02e54af52f296bd9c432c4d909978122609
s390x containernetworking-plugins-1.5.1-2.el9.s390x.rpm 86c7d7cdb15f05680cb1a719eed92defc3f50b3e6d4b4a006cfa8935293c7664
x86_64 containernetworking-plugins-1.5.1-2.el9.x86_64.rpm 48edce7944c0f9318c986cb0841f3ccca18a39063af3220c0a766fd6a3bccae3
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.