INFSA-2025:9143: containernetworking-plugins security update

Information about definition

Identificator: INFSA-2025:9143

Type: security

Release date: 2025-07-07 09:35:00 UTC

Information about package

The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted.

Vulnerabilities description

  • CVE-2025-22871

    The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

Severity level

CVE Score CVSS 2.0 Score CVSS 3.x Score CVSS 4.0
no information 5.4 no information
Critical, important, moderate, low

Updated packages