Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Container Networking Plugins Update Fixes Security Flaw
published 2 years ago
Summary
An update is available for Red Hat's container networking plugins, which fixes a security issue that could allow an attacker to gain unauthorized access to sensitive data. This affects organizations using Red Hat's container networking plugins. To stay secure, ensure you have the latest version installed.
What to do
- Update redhat containernetworking-plugins to version 1:1.4.0-4.el9_4.
- Update redhat containernetworking-plugins-debuginfo to version 1:1.4.0-4.el9_4.
- Update redhat containernetworking-plugins-debugsource to version 1:1.4.0-4.el9_4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | containernetworking-plugins |
< 1:1.4.0-4.el9_4 Fix: upgrade to 1:1.4.0-4.el9_4
|
| Red Hat:enterprise_linux:9::appstream | redhat | containernetworking-plugins-debuginfo |
< 1:1.4.0-4.el9_4 Fix: upgrade to 1:1.4.0-4.el9_4
|
| Red Hat:enterprise_linux:9::appstream | redhat | containernetworking-plugins-debugsource |
< 1:1.4.0-4.el9_4 Fix: upgrade to 1:1.4.0-4.el9_4
|
Original advisory text
Red Hat Security Advisory: containernetworking-plugins security update
References
- https://access.redhat.com/errata/RHSA-2024:4761 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2262921 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4761.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-1394 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-1394 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-1394 Vendor Advisory
- https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850... Third Party Advisory
- https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6 Third Party Advisory
- https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77... Third Party Advisory
- https://pkg.go.dev/vuln/GO-2024-2660 Vendor Advisory
- https://vuln.go.dev/ID/GO-2024-2660.json Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Sep 2024
Updated22 Mar 2026
First seen22 Mar 2026
Sources
RHSA-2024:4761 · OSV
Track software like this
Free during beta