Issued at: 2026-08-26
Updated at: 2026-08-26
Advisory content derived from
Red Hat RHSA-2024:3831,
© Red Hat, Inc., used under
CC BY 4.0, with modifications.
Synopsis
Moderate: containernetworking-plugins security and bug fix update
Description
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.
Security Fix(es):
* golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
Affected products
Rocky Linux 9 aarch64
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2268017
CVEs
CVE-2023-45290
Affected packages
Rocky Linux 9 x86_64 - AppStream
containernetworking-plugins-1:1.4.0-6.el9_4.x86_64.rpm
containernetworking-plugins-debugsource-1:1.4.0-6.el9_4.x86_64.rpm
containernetworking-plugins-debuginfo-1:1.4.0-6.el9_4.x86_64.rpm
containernetworking-plugins-1:1.4.0-6.el9_4.src.rpm
Rocky Linux 9 aarch64 - AppStream
containernetworking-plugins-debugsource-1:1.4.0-6.el9_4.aarch64.rpm
containernetworking-plugins-1:1.4.0-6.el9_4.aarch64.rpm
containernetworking-plugins-debuginfo-1:1.4.0-6.el9_4.aarch64.rpm
containernetworking-plugins-1:1.4.0-6.el9_4.src.rpm
Rocky Linux 9 s390x - AppStream
containernetworking-plugins-1:1.4.0-6.el9_4.s390x.rpm
containernetworking-plugins-debugsource-1:1.4.0-6.el9_4.s390x.rpm
containernetworking-plugins-1:1.4.0-6.el9_4.src.rpm
containernetworking-plugins-debuginfo-1:1.4.0-6.el9_4.s390x.rpm
Rocky Linux 9 ppc64le - AppStream
containernetworking-plugins-debuginfo-1:1.4.0-6.el9_4.ppc64le.rpm
containernetworking-plugins-debugsource-1:1.4.0-6.el9_4.ppc64le.rpm
containernetworking-plugins-1:1.4.0-6.el9_4.ppc64le.rpm
containernetworking-plugins-1:1.4.0-6.el9_4.src.rpm