Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2020:1957-1 Moderate: cni-plugins Man-in-the-Middle Issue

suse
Calendar Grey July 20, 2020
Dist Suse Esm H88
SUSE Security Bulletin for cni-tools, Notice ID: SUSE-SU-2021:2345-1, tackling moderate risk vulnerability.
An update that fixes one vulnerability is now available

Summary

This update for cni-plugins fixes the following issues: cni-plugins updated to version 0.8.6 - CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410). Release notes: https://github.com/containernetworking/plugins/releases/tag/v0.8.6 Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Public Cloud 15-SP1: zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP1-2020-1957=1 - SUSE Linux Enterprise Module for Containers 15-SP2: zypper in -t patch SUSE-SLE-Module-Containers-15-SP2-2020-1957=1

Topics%20covered

Topics Covered

security advisory moderate public cloud SUSE Linux Enterprise containers cni-plugins Man-in-the-Middle

References

#1172410

Cross- CVE-2020-10749

Affected Products:

SUSE Linux Enterprise Module for Public Cloud 15-SP1

SUSE Linux Enterprise Module for Containers 15-SP2

SUSE Linux Enterprise Module for Containers 15-SP1

https://www.suse.com/security/cve/CVE-2020-10749.html

https://bugzilla.suse.com/1172410

Announcement ID: SUSE-SU-2020:1957-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate public cloud SUSE Linux Enterprise containers cni-plugins Man-in-the-Middle

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here