RHSA-2020:2684: Moderate: containernetworking-plugins security update
The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2684?
RHSA-2020:2684 has been classified with a moderate severity level.
How do I fix RHSA-2020:2684?
To fix RHSA-2020:2684, update the affected 'containernetworking-plugins' package to version 0.8.3-3.el7_8.
Which versions of containernetworking-plugins are affected by RHSA-2020:2684?
Versions of containernetworking-plugins up to 0.8.3-3.el7_8 are affected by RHSA-2020:2684.
What software packages does RHSA-2020:2684 affect?
RHSA-2020:2684 affects the containernetworking-plugins and containernetworking-plugins-debuginfo packages.
Is a remediation plan available for RHSA-2020:2684?
Yes, a remediation plan is provided and involves upgrading to the recommended version of the affected packages.