[ALSA-2026:18913] Important: containernetworking-plugins security update
Type:
security
Severity:
important
Release date:
2026-05-26
Description:
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 containernetworking-plugins-1.9.0-2.el9.aarch64.rpm d17f18ebbac398ea5870120e539afb60af6dd134428282a1b6c377e1e10e62c0
ppc64le containernetworking-plugins-1.9.0-2.el9.ppc64le.rpm e74295503f32ff0a4df8c953ece6a21d1d82a9e0e0df9325202da5e9f998aec4
s390x containernetworking-plugins-1.9.0-2.el9.s390x.rpm f3925f5ff3cce69d9981d25b7d0421efbbb7afa377e59555a9c02687d11b734b
x86_64 containernetworking-plugins-1.9.0-2.el9.x86_64.rpm f7c738c355c5c0801ed62102d3707090f0d0260b8b9a4a848e6d380a8d7f48c6
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.