[ALSA-2026:3341] Important: containernetworking-plugins security update
Type:
security
Severity:
important
Release date:
2026-03-02
Description:
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 containernetworking-plugins-1.7.1-3.el9_7.aarch64.rpm 4b5580c3b94b3c930c227c79e1e1d07a01b7b15a29562e3c048f6b5e853fb38b
ppc64le containernetworking-plugins-1.7.1-3.el9_7.ppc64le.rpm 1a61d0233fee2ceb9a7522649da2cb351629698763ba605dee16ff5c6d5c04b5
s390x containernetworking-plugins-1.7.1-3.el9_7.s390x.rpm 8f19cca689a68018bbecc0e7b93ead8be46162f152f5dc4d7255ecfde2e1cd1e
x86_64 containernetworking-plugins-1.7.1-3.el9_7.x86_64.rpm 2f039ff30f668ece923c980a97564446b2567f8fed8077e28d7988d786d48880
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.