[CLSA-2025:1762538558] containernetworking-plugins: Fix of 13 CVEs
Type:
security
Severity:
Critical
Release date:
2025-11-07 18:02:43 UTC
Description:
- rebuild with newer golang to fix multiple security vulnerabilities: - CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service - CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service - CVE-2022-41725: fix HTTP/2 server connection handling causing premature closure - CVE-2022-41724: fix HTTP/2 server connection misuse causing resource exhaustion - CVE-2023-24538: fix HTTP/2 request handling causing denial of service - CVE-2023-39322: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24539: fix HTTP/2 request handling causing excessive memory consumption - CVE-2023-39321: fix HTTP/2 frame processing causing panic and denial of service - CVE-2024-24788: fix HTTP/2 connection handling causing denial of service - CVE-2022-41723: fix HTTP/2 server connection handling causing resource exhaustion - CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability - CVE-2024-34156: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24536: fix HTTP/2 request handling causing denial of service
Updated packages:
  • containernetworking-plugins-1.2.0-1.el9.tuxcare.els2.x86_64.rpm
    sha:e78995b99ec02f9778042da880d1c749ab1f037d2b45c7b4ac324e689e992494
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.