RHSA-2020:0406: Important: containernetworking-plugins security update
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.<br>Security Fix(es):<br><li> HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)</li> <li> HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0406?
The severity of RHSA-2020:0406 is classified as important.
How do I fix RHSA-2020:0406?
To fix RHSA-2020:0406, you should upgrade to the version 0.8.1-4.el7_7 of the containernetworking-plugins.
Which packages are affected by RHSA-2020:0406?
The affected packages in RHSA-2020:0406 include containernetworking-plugins and containernetworking-plugins-debuginfo.
What is the issue addressed in RHSA-2020:0406?
RHSA-2020:0406 addresses vulnerabilities associated with the Container Network Interface (CNI) project.
Who maintains the packages affected by RHSA-2020:0406?
The affected packages are maintained by Red Hat.