RED HATVERIFIED
Red Hat Security Advisory: containernetworking-plugins security update
Checked 4 Oct 2026. BlackTree preserves the last verified facts if a later source check is temporarily unavailable.
Open the official publisher source
← Lifecycle catalogue
SECURITY ADVISORYRED HATVERIFIED
PUBLISHER UPDATE · RHSA-2026-9109
RHSA-2026-9109 release notes and known issues
Red Hat Security Advisory: containernetworking-plugins security update
Scope: Red Hat Enterprise Linux. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.
Summary
An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) * golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726) * crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) * net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Known issues
Publisher statementNot stated. The verified publisher record does not contain a known-issues statement.
Affected products and versions
Products
- Red Hat Enterprise Linux
Affected versions
- Red Hat Enterprise Linux AppStream EUS (v.9.6)
- containernetworking-plugins-1:1.6.2-3.el9_6.src
- containernetworking-plugins-1:1.6.2-3.el9_6.aarch64
- containernetworking-plugins-debugsource-1:1.6.2-3.el9_6.aarch64
- containernetworking-plugins-debuginfo-1:1.6.2-3.el9_6.aarch64
- containernetworking-plugins-1:1.6.2-3.el9_6.ppc64le
- containernetworking-plugins-debugsource-1:1.6.2-3.el9_6.ppc64le
- containernetworking-plugins-debuginfo-1:1.6.2-3.el9_6.ppc64le
- containernetworking-plugins-1:1.6.2-3.el9_6.x86_64
- containernetworking-plugins-debugsource-1:1.6.2-3.el9_6.x86_64
- containernetworking-plugins-debuginfo-1:1.6.2-3.el9_6.x86_64
- containernetworking-plugins-1:1.6.2-3.el9_6.s390x
- containernetworking-plugins-debugsource-1:1.6.2-3.el9_6.s390x
- containernetworking-plugins-debuginfo-1:1.6.2-3.el9_6.s390x
Fixed versions or updates
- No fixed version is stated in this record.
Recommended action
Apply the Red Hat updates listed in the official advisory.