Summary
[1:1.4.0-2]
- rebuild
- Related: RHEL-18372
[1:1.4.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
- Related: RHEL-2112
[1:1.3.0-5]
- fix path to dhcp service
- Resolves: #RHEL-3140
[1:1.3.0-4]
- add Epoch in Provides
- Related: #2176063
[1:1.3.0-3]
- remove no_openssl for FIPS compliance
- Related: #2176063
[1:1.3.0-2]
- rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2179960
- Resolves: #2187333
- Resolves: #2187376
- Resolves: #2203705
- Resolves: #2207519
[1:1.3.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.3.0
- Related: #2176063
[1:1.2.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.2.0
- Related: #2124478
[1:1.1.1-3]
- Re-enable LTO and debuginfo
- Related: #2061316
[1:1.1.1-2]
- BuildRequires: /usr/bin/go-md2man
- Related: #2061316
[1:1.1.1-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.1.1
- Related: #2061316
[1:1.1.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.1.0
- Related: #2061316
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | containernetworking-plugins | 1:1.4.0-2.el9_4 |
Vulnerabilities 2
-
Unscored —
Denial of service via chunk extensions in net/http
A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically rea…
-
Unscored —
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of…