Summary
[1:1.5.1-2]
- rebuild for CVE-2024-24791
- Resolves: RHEL-47166
[1:1.5.1-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
- Related: RHEL-27608
[1:1.5.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
- Related: RHEL-27608
[1:1.4.1-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
- Resolves: RHEL-28855
[1:1.4.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
- Related: RHEL-2112
[1:1.3.0-5]
- fix path to dhcp service
- Resolves: #RHEL-3140
[1:1.3.0-4]
- add Epoch in Provides
- Related: #2176063
[1:1.3.0-3]
- remove no_openssl for FIPS compliance
- Related: #2176063
[1:1.3.0-2]
- rebuild for following CVEs:
CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
- Resolves: #2179960
- Resolves: #2187333
- Resolves: #2187376
- Resolves: #2203705
- Resolves: #2207519
[1:1.3.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.3.0
- Related: #2176063
[1:1.2.0-1]
- update to https://github.com/containernetworking/plugins/releases/tag/v1.2.0
- Related: #2124478
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | containernetworking-plugins | 1:1.5.1-2.el9 |
Vulnerabilities 2
-
High 7.5
Denial of service due to improper 100-continue handling in net/http
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next r…
-
Medium 5.9
Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.