Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issues: Security: re-vendor Go dependencies to address CVEs tracked against containerized-data-importer backport of upstream PR 4110, post-v1.65.0. Fixed by this update: google.golang.org/grpc 1.65.0 - 1.79.3: bsc1260295 CVE-2026-331...

SUSE-SU-2026:2493-1 Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issues: - Security: re-vendor Go dependencies to address CVEs tracked against containerized-data-importer backport of upstream PR 4110, post-v1.65.0. Fixed by this update: google.golang.org/grpc 1.65.0 - 1.79.3: bsc1260295...

OPENSUSE-SU-2026:11074-1 containerized-data-importer1.65-api-1.65.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed...

containerized-data-importer-1.65-api-1.65.0-1.1 on GA media (moderate)

containerized-data-importer-1.65-api-1.65.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11054-1 Rating: moderate Cross-References: CVE-2024-3727 CVSS scores: CVE-2024-3727 SUSE : 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves on...

PT-2026-50856

These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11054-1 containerized-data-importer-1.65-api-1.65.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2026:2407-1 Security update for containerized-data-importer

This update for containerized-data-importer rebuilds the current sources against latest go security release and the images against the latest released updates...

CVE-2026-33814 affecting package containerized-data-importer for versions less than 1.62.0-6

CVE-2026-33814 affecting package containerized-data-importer for versions less than 1.62.0-6. A patched version of the package is available...

CVE-2026-42502 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-42502 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-42506 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-42506 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-39821 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-39821 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

AZL-87546 CVE-2026-42506 affecting package containerized-data-importer for versions less than 1.62.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87549 CVE-2026-42502 affecting package containerized-data-importer for versions less than 1.62.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87543 CVE-2026-39821 affecting package containerized-data-importer for versions less than 1.62.0-6

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-87558 CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87561 CVE-2026-25680 affecting package containerized-data-importer for versions less than 1.62.0-6

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87555 CVE-2026-25681 affecting package containerized-data-importer for versions less than 1.62.0-6

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...