Lucene search

K
suseSuseOPENSUSE-SU-2020:1050-1
HistoryJul 23, 2020 - 12:00 a.m.

Security update for cni-plugins (moderate)

2020-07-2300:00:00
lists.opensuse.org
42
cni-plugins
update
vulnerability
cve-2020-10749
man-in-the-middle
ipv4
ipv6
patch
opensuse
leap 15.2

EPSS

0.001

Percentile

40.1%

An update that fixes one vulnerability is now available.

Description:

This update for cni-plugins fixes the following issues:

cni-plugins updated to version 0.8.6

  • CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4
    clusters by spoofing IPv6 router advertisements (bsc#1172410).

Release notes:
https://github.com/containernetworking/plugins/releases/tag/v0.8.6

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2020-1050=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2x86_64< - openSUSE Leap 15.2 (x86_64):- openSUSE Leap 15.2 (x86_64):.x86_64.rpm