containernetworking/plugins v1.9.0

CNI plugins v1.9.0

on GitHub

What's Changed

This release fixes CVE-2025-67499, a bug in the nftables backend for the portmap plugin that can cause traffic to be unexpectedly intercepted.

Bugs

• portmap: ensure nftables backend only intercept local traffic by @champtar in #1210.

Other changes

• Fix file exists errro in dummy cni by @liuyuan10 in #1205
• Ignore settling with down state since it would never settle by @bn222 in #1207

Full Changelog: v1.8.0...v1.9.0