Skip to content
OpenAdvisories
Medium ELSA-2024-6186 1 CVE

Moderate: containernetworking-plugins security update (Oracle Linux 9)

Published Sep 3, 2024 · Updated Sep 3, 2024

Ecosystem: Oracle Linux

Summary

[1:1.4.0-5]
- rebuild for CVE-2024-24783
- Resolves: RHEL-28431

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 containernetworking-plugins 1:1.4.0-5.el9_4

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-24783

    Verify panics on certificates with an unknown public key algorithm in crypto/x509

    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyC…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go