rpms/cni
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

rpms/cni: update to 1.9.1 #4

Merged
sbelikov merged 1 commit from update-cni-1.9.1 into niceos-5.2 2026-05-02 18:37:33 +03:00
Conversation 0 Commits 1 Files changed 1 +10 -1
sbelikov commented 2026-05-02 18:34:39 +03:00
Owner
Copy link

Update cni from 1.7.1 to 1.9.1.

Upstream describes v1.9.1 as a patch release with dependency updates and minor fixes.

Highlights:

  • bandwidth: handle nil bandwidth in CHECK to avoid a segfault
  • vrf: preserve IPAM-configured routes during route filtering
  • bridge: include the attempted IP address in AddrAdd errors
  • selinux: bump to 1.13.0 for CVE-2025-52881

Risk assessment:

  • No explicit breaking changes or API/ABI removals are reported upstream.
  • Main compatibility risk is the vrf behavior change; deployments relying on previous route-filtering behavior should be revalidated.
  • Security relevance requires confirming the downstream build picks up the selinux bump cleanly.

Required validation before merge:

  • clean chroot rebuild
  • verify Source0 and spec version bump
  • run %check and container-networking smoke tests
  • exercise VRF and bandwidth paths if available

References:

  • upstream release notes and compare page
  • GHSA-CGRX-MC8F-2PRM advisory reference
  • NiceOS issue tracker entry for this update
Update cni from 1.7.1 to 1.9.1. Upstream describes v1.9.1 as a patch release with dependency updates and minor fixes. Highlights: - bandwidth: handle nil bandwidth in CHECK to avoid a segfault - vrf: preserve IPAM-configured routes during route filtering - bridge: include the attempted IP address in AddrAdd errors - selinux: bump to 1.13.0 for CVE-2025-52881 Risk assessment: - No explicit breaking changes or API/ABI removals are reported upstream. - Main compatibility risk is the vrf behavior change; deployments relying on previous route-filtering behavior should be revalidated. - Security relevance requires confirming the downstream build picks up the selinux bump cleanly. Required validation before merge: - clean chroot rebuild - verify Source0 and spec version bump - run %check and container-networking smoke tests - exercise VRF and bandwidth paths if available References: - upstream release notes and compare page - GHSA-CGRX-MC8F-2PRM advisory reference - NiceOS issue tracker entry for this update
sbelikov merged commit 5cab6dad14 into niceos-5.2 2026-05-02 18:37:33 +03:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
ai-summary
Issue contains local NiceSOFT AI generated preliminary analysis

  
bot
Created by automation

  
needs-build
Needs build verification

  
needs-triage
Needs maintainer triage

  
priority/high
High priority

  
security-release
Release notes mention security fixes or CVE

  
update/minor
Minor update

  
upstream-update
New upstream version is available

  
upstream/github
GitHub upstream

No labels
ai-summary
bot
needs-build
needs-triage
priority/high
security-release
update/minor
upstream-update
upstream/github
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
rpms/cni!4
No description provided.