Description:
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.
Security Fix(es):
* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
* crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
containernetworking-plugins-1.7.1-3.el9_7.aarch64.rpm |
4b5580c3b94b3c930c227c79e1e1d07a01b7b15a29562e3c048f6b5e853fb38b |
| ppc64le |
containernetworking-plugins-1.7.1-3.el9_7.ppc64le.rpm |
1a61d0233fee2ceb9a7522649da2cb351629698763ba605dee16ff5c6d5c04b5 |
| s390x |
containernetworking-plugins-1.7.1-3.el9_7.s390x.rpm |
8f19cca689a68018bbecc0e7b93ead8be46162f152f5dc4d7255ecfde2e1cd1e |
| x86_64 |
containernetworking-plugins-1.7.1-3.el9_7.x86_64.rpm |
2f039ff30f668ece923c980a97564446b2567f8fed8077e28d7988d786d48880 |