RHSA-2023:2367-01 -- Redhat containernetworking-pluginsID: oval:org.secpod.oval:def:507688 | Date: (C)2023-05-22 (M)2024-04-29 |
Class: PATCH | Family: unix |
The Container Network Interface project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix: * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests * golang: crypto/tls: session tickets lack random ticket_age_add For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.
Platform: |
Red Hat Enterprise Linux 9 |
Product: |
containernetworking-plugins |