diff --git a/SPECS/containernetworking-plugins.spec b/SPECS/containernetworking-plugins.spec index fff9867..cc45b62 100644 --- a/SPECS/containernetworking-plugins.spec +++ b/SPECS/containernetworking-plugins.spec @@ -17,7 +17,7 @@ go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" - Epoch: 1 Name: containernetworking-plugins Version: 1.6.2 -Release: 1%{?dist} +Release: 2%{?dist} Summary: CNI network plugins License: ASL 2.0 URL: https://%{provider_prefix} @@ -123,6 +123,10 @@ export GOPATH=%{buildroot}/%{gopath}:$(pwd)/vendor:%{gopath} %{_unitdir}/cni-dhcp.socket %changelog +* Wed Jun 04 2025 Jindrich Novy - 1:1.6.2-2 +- rebuild to fix CVE-2025-22871 containernetworking-plugins: Request smuggling due to acceptance of invalid chunked data in net/http +- Resolves: RHEL-90031 + * Fri Jan 10 2025 Jindrich Novy - 1:1.6.2-1 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2 - Related: RHEL-60277