[CLSA-2026:1772575666] containernetworking-plugins: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-03-03 22:07:51 UTC
Description:
- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry
Updated packages:
  • containernetworking-plugins-1.2.0-1.el9.tuxcare.els3.x86_64.rpm
    sha:fba76a9dd40d16984c75dac05027fbf4cda321fe1ceeeefc81accfec28286d82
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.