Rapid7 Vulnerability & Exploit Database

Oracle Linux: ELSA-2024-2272: containernetworking-plugins security update

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Oracle Linux: ELSA-2024-2272: containernetworking-plugins security update

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
05/02/2024
Created
05/22/2024
Added
05/06/2024
Modified
05/06/2024

Description

[1:1.4.0-2] - rebuild - Related: RHEL-18372 [1:1.4.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0 - Related: RHEL-2112 [1:1.3.0-5] - fix path to dhcp service - Resolves: #RHEL-3140 [1:1.3.0-4] - add Epoch in Provides - Related: #2176063 [1:1.3.0-3] - remove no_openssl for FIPS compliance - Related: #2176063 [1:1.3.0-2] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179960 - Resolves: #2187333 - Resolves: #2187376 - Resolves: #2203705 - Resolves: #2207519 [1:1.3.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.3.0 - Related: #2176063 [1:1.2.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.2.0 - Related: #2124478 [1:1.1.1-3] - Re-enable LTO and debuginfo - Related: #2061316 [1:1.1.1-2] - BuildRequires: /usr/bin/go-md2man - Related: #2061316 [1:1.1.1-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.1.1 - Related: #2061316 [1:1.1.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.1.0 - Related: #2061316

Solution(s)

  • oracle-linux-upgrade-containernetworking-plugins

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;