Red Hat Product Errata RHSA-2024:3831 - Security Advisory
Issued:
2024-06-11
Updated:
2024-06-11

RHSA-2024:3831 - Security Advisory

Synopsis

Moderate: containernetworking-plugins security and bug fix update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.

Security Fix(es):

  • golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2268017 - CVE-2023-45290 golang: net/http: memory exhaustion in Request.ParseMultipartForm

Red Hat Enterprise Linux for x86_64 9

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
x86_64
containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm SHA-256: c527a467e06d4c3344e02376675e7e989100a5f3192790a0a0614f03dfc365d0
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.x86_64.rpm SHA-256: 66c6c01d8070b6e8c22b5f4b1094cc72b6300e12a9e60f5904eebdcb86ad7614
containernetworking-plugins-debugsource-1.4.0-3.el9_4.x86_64.rpm SHA-256: 60872a9f2a36a74cf82a6f3459e8fdb0552822231a1904ca81bdc8a6a5d0e36f

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
x86_64
containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm SHA-256: c527a467e06d4c3344e02376675e7e989100a5f3192790a0a0614f03dfc365d0
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.x86_64.rpm SHA-256: 66c6c01d8070b6e8c22b5f4b1094cc72b6300e12a9e60f5904eebdcb86ad7614
containernetworking-plugins-debugsource-1.4.0-3.el9_4.x86_64.rpm SHA-256: 60872a9f2a36a74cf82a6f3459e8fdb0552822231a1904ca81bdc8a6a5d0e36f

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
x86_64
containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm SHA-256: c527a467e06d4c3344e02376675e7e989100a5f3192790a0a0614f03dfc365d0
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.x86_64.rpm SHA-256: 66c6c01d8070b6e8c22b5f4b1094cc72b6300e12a9e60f5904eebdcb86ad7614
containernetworking-plugins-debugsource-1.4.0-3.el9_4.x86_64.rpm SHA-256: 60872a9f2a36a74cf82a6f3459e8fdb0552822231a1904ca81bdc8a6a5d0e36f

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
x86_64
containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm SHA-256: c527a467e06d4c3344e02376675e7e989100a5f3192790a0a0614f03dfc365d0
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.x86_64.rpm SHA-256: 66c6c01d8070b6e8c22b5f4b1094cc72b6300e12a9e60f5904eebdcb86ad7614
containernetworking-plugins-debugsource-1.4.0-3.el9_4.x86_64.rpm SHA-256: 60872a9f2a36a74cf82a6f3459e8fdb0552822231a1904ca81bdc8a6a5d0e36f

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
x86_64
containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm SHA-256: c527a467e06d4c3344e02376675e7e989100a5f3192790a0a0614f03dfc365d0
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.x86_64.rpm SHA-256: 66c6c01d8070b6e8c22b5f4b1094cc72b6300e12a9e60f5904eebdcb86ad7614
containernetworking-plugins-debugsource-1.4.0-3.el9_4.x86_64.rpm SHA-256: 60872a9f2a36a74cf82a6f3459e8fdb0552822231a1904ca81bdc8a6a5d0e36f

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
s390x
containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm SHA-256: 2b9d1ff427e9e6950233d37aa775754449d906178a7566caa69ec06ae51e975f
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.s390x.rpm SHA-256: 37fcc798fb6c07de25a577ea34cacd1c144016a4c84e3a9ba3c58e9ffa43155f
containernetworking-plugins-debugsource-1.4.0-3.el9_4.s390x.rpm SHA-256: 493c8b36ebe0a60ab873a1877d6ee636d06c393ffc5e767287197f6e3c30299a

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
s390x
containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm SHA-256: 2b9d1ff427e9e6950233d37aa775754449d906178a7566caa69ec06ae51e975f
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.s390x.rpm SHA-256: 37fcc798fb6c07de25a577ea34cacd1c144016a4c84e3a9ba3c58e9ffa43155f
containernetworking-plugins-debugsource-1.4.0-3.el9_4.s390x.rpm SHA-256: 493c8b36ebe0a60ab873a1877d6ee636d06c393ffc5e767287197f6e3c30299a

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
s390x
containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm SHA-256: 2b9d1ff427e9e6950233d37aa775754449d906178a7566caa69ec06ae51e975f
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.s390x.rpm SHA-256: 37fcc798fb6c07de25a577ea34cacd1c144016a4c84e3a9ba3c58e9ffa43155f
containernetworking-plugins-debugsource-1.4.0-3.el9_4.s390x.rpm SHA-256: 493c8b36ebe0a60ab873a1877d6ee636d06c393ffc5e767287197f6e3c30299a

Red Hat Enterprise Linux for Power, little endian 9

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
ppc64le
containernetworking-plugins-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 236a9ab7b6328bfadc1ccd9517fc7259b186a97b6cc185f8cf7eb5a997593994
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 7b9d6a4f31d30e26320d52462b5d8c3073eededc601b44b8cb6fb07edf8b661b
containernetworking-plugins-debugsource-1.4.0-3.el9_4.ppc64le.rpm SHA-256: aeb78cda96fb845141b883c33929681bde8e14aa2c06932ed53c7908f20180d8

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
ppc64le
containernetworking-plugins-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 236a9ab7b6328bfadc1ccd9517fc7259b186a97b6cc185f8cf7eb5a997593994
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 7b9d6a4f31d30e26320d52462b5d8c3073eededc601b44b8cb6fb07edf8b661b
containernetworking-plugins-debugsource-1.4.0-3.el9_4.ppc64le.rpm SHA-256: aeb78cda96fb845141b883c33929681bde8e14aa2c06932ed53c7908f20180d8

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
ppc64le
containernetworking-plugins-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 236a9ab7b6328bfadc1ccd9517fc7259b186a97b6cc185f8cf7eb5a997593994
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 7b9d6a4f31d30e26320d52462b5d8c3073eededc601b44b8cb6fb07edf8b661b
containernetworking-plugins-debugsource-1.4.0-3.el9_4.ppc64le.rpm SHA-256: aeb78cda96fb845141b883c33929681bde8e14aa2c06932ed53c7908f20180d8

Red Hat Enterprise Linux for ARM 64 9

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
aarch64
containernetworking-plugins-1.4.0-3.el9_4.aarch64.rpm SHA-256: fdfb8df453df9fdd73c6874b682a37f98b15f5ae81892c8bd40b8d55820c3b07
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.aarch64.rpm SHA-256: 83a9b70d606bb91fcfcc61be5e8ced505de32c8dcf2c0df829c22a55a56e23aa
containernetworking-plugins-debugsource-1.4.0-3.el9_4.aarch64.rpm SHA-256: 36d627574dc5395481990ce3c24e0c696f6fd4ee1bb9572dc7ec4798a6654ff8

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
aarch64
containernetworking-plugins-1.4.0-3.el9_4.aarch64.rpm SHA-256: fdfb8df453df9fdd73c6874b682a37f98b15f5ae81892c8bd40b8d55820c3b07
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.aarch64.rpm SHA-256: 83a9b70d606bb91fcfcc61be5e8ced505de32c8dcf2c0df829c22a55a56e23aa
containernetworking-plugins-debugsource-1.4.0-3.el9_4.aarch64.rpm SHA-256: 36d627574dc5395481990ce3c24e0c696f6fd4ee1bb9572dc7ec4798a6654ff8

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
aarch64
containernetworking-plugins-1.4.0-3.el9_4.aarch64.rpm SHA-256: fdfb8df453df9fdd73c6874b682a37f98b15f5ae81892c8bd40b8d55820c3b07
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.aarch64.rpm SHA-256: 83a9b70d606bb91fcfcc61be5e8ced505de32c8dcf2c0df829c22a55a56e23aa
containernetworking-plugins-debugsource-1.4.0-3.el9_4.aarch64.rpm SHA-256: 36d627574dc5395481990ce3c24e0c696f6fd4ee1bb9572dc7ec4798a6654ff8

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
ppc64le
containernetworking-plugins-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 236a9ab7b6328bfadc1ccd9517fc7259b186a97b6cc185f8cf7eb5a997593994
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 7b9d6a4f31d30e26320d52462b5d8c3073eededc601b44b8cb6fb07edf8b661b
containernetworking-plugins-debugsource-1.4.0-3.el9_4.ppc64le.rpm SHA-256: aeb78cda96fb845141b883c33929681bde8e14aa2c06932ed53c7908f20180d8

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
ppc64le
containernetworking-plugins-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 236a9ab7b6328bfadc1ccd9517fc7259b186a97b6cc185f8cf7eb5a997593994
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.ppc64le.rpm SHA-256: 7b9d6a4f31d30e26320d52462b5d8c3073eededc601b44b8cb6fb07edf8b661b
containernetworking-plugins-debugsource-1.4.0-3.el9_4.ppc64le.rpm SHA-256: aeb78cda96fb845141b883c33929681bde8e14aa2c06932ed53c7908f20180d8

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
x86_64
containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm SHA-256: c527a467e06d4c3344e02376675e7e989100a5f3192790a0a0614f03dfc365d0
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.x86_64.rpm SHA-256: 66c6c01d8070b6e8c22b5f4b1094cc72b6300e12a9e60f5904eebdcb86ad7614
containernetworking-plugins-debugsource-1.4.0-3.el9_4.x86_64.rpm SHA-256: 60872a9f2a36a74cf82a6f3459e8fdb0552822231a1904ca81bdc8a6a5d0e36f

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
x86_64
containernetworking-plugins-1.4.0-3.el9_4.x86_64.rpm SHA-256: c527a467e06d4c3344e02376675e7e989100a5f3192790a0a0614f03dfc365d0
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.x86_64.rpm SHA-256: 66c6c01d8070b6e8c22b5f4b1094cc72b6300e12a9e60f5904eebdcb86ad7614
containernetworking-plugins-debugsource-1.4.0-3.el9_4.x86_64.rpm SHA-256: 60872a9f2a36a74cf82a6f3459e8fdb0552822231a1904ca81bdc8a6a5d0e36f

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
aarch64
containernetworking-plugins-1.4.0-3.el9_4.aarch64.rpm SHA-256: fdfb8df453df9fdd73c6874b682a37f98b15f5ae81892c8bd40b8d55820c3b07
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.aarch64.rpm SHA-256: 83a9b70d606bb91fcfcc61be5e8ced505de32c8dcf2c0df829c22a55a56e23aa
containernetworking-plugins-debugsource-1.4.0-3.el9_4.aarch64.rpm SHA-256: 36d627574dc5395481990ce3c24e0c696f6fd4ee1bb9572dc7ec4798a6654ff8

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
aarch64
containernetworking-plugins-1.4.0-3.el9_4.aarch64.rpm SHA-256: fdfb8df453df9fdd73c6874b682a37f98b15f5ae81892c8bd40b8d55820c3b07
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.aarch64.rpm SHA-256: 83a9b70d606bb91fcfcc61be5e8ced505de32c8dcf2c0df829c22a55a56e23aa
containernetworking-plugins-debugsource-1.4.0-3.el9_4.aarch64.rpm SHA-256: 36d627574dc5395481990ce3c24e0c696f6fd4ee1bb9572dc7ec4798a6654ff8

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
s390x
containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm SHA-256: 2b9d1ff427e9e6950233d37aa775754449d906178a7566caa69ec06ae51e975f
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.s390x.rpm SHA-256: 37fcc798fb6c07de25a577ea34cacd1c144016a4c84e3a9ba3c58e9ffa43155f
containernetworking-plugins-debugsource-1.4.0-3.el9_4.s390x.rpm SHA-256: 493c8b36ebe0a60ab873a1877d6ee636d06c393ffc5e767287197f6e3c30299a

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
containernetworking-plugins-1.4.0-3.el9_4.src.rpm SHA-256: f368ba2a2598677a1f13cb49b322b73d173f66b40d32bf8e4b088ab1b963024b
s390x
containernetworking-plugins-1.4.0-3.el9_4.s390x.rpm SHA-256: 2b9d1ff427e9e6950233d37aa775754449d906178a7566caa69ec06ae51e975f
containernetworking-plugins-debuginfo-1.4.0-3.el9_4.s390x.rpm SHA-256: 37fcc798fb6c07de25a577ea34cacd1c144016a4c84e3a9ba3c58e9ffa43155f
containernetworking-plugins-debugsource-1.4.0-3.el9_4.s390x.rpm SHA-256: 493c8b36ebe0a60ab873a1877d6ee636d06c393ffc5e767287197f6e3c30299a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.