SUSE-SU-2025:0217-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.61.0: Release notes -...

PT-2025-5678 · Unknown +1 · Nbdkit-Server +9

Name of the Vulnerable Software and Affected Versions: cdi-apiserver-container affected versions not specified cdi-cloner-container affected versions not specified cdi-controller-container affected versions not specified cdi-importer-container affected versions not specified cdi-operator-containe...

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.57.0-7

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.57.0-7. A patched version of the package is available...

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22. A patched version of the package is available...

AZL-54440 CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.57.0-8

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54527 CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6. A patched version of the package is available...

CVE-2022-41717 affecting package containerized-data-importer for versions less than 1.55.0-20

CVE-2022-41717 affecting package containerized-data-importer for versions less than 1.55.0-20. A patched version of the package is available...

CVE-2022-32149 affecting package containerized-data-importer for versions less than 1.55.0-20

CVE-2022-32149 affecting package containerized-data-importer for versions less than 1.55.0-20. A patched version of the package is available...

CVE-2024-28180 affecting package containerized-data-importer for versions less than 1.55.0-20

CVE-2024-28180 affecting package containerized-data-importer for versions less than 1.55.0-20. A patched version of the package is available...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2024:2668-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2668-1 advisory. Update to version 1.59.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0 Release...

SUSE-SU-2024:2668-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.59.0 Release notes...

PT-2024-41004 · Unknown · Containerized-Data-Importer

Name of the Vulnerable Software and Affected Versions: containerized-data-importer versions prior to 1.59.0 Description: The issue is fixed by updating to version 1.59.0 of the containerized-data-importer. Release notes for versions 1.59.0 and 1.58.1 are available, providing more information abou...

PT-2024-41002 · Unknown · Containerized-Data-Importer

Name of the Vulnerable Software and Affected Versions: containerized-data-importer versions prior to 1.59.0 Description: The issue is fixed by updating to version 1.59.0. Release notes for versions 1.59.0 and 1.58.1 are available. Recommendations: Update to version 1.59.0 to resolve the issue...

CBL Mariner 2.0 Security Update: containerized-data-importer / cri-o / ig / libcontainers-common / skopeo (CVE-2024-3727)

The version of containerized-data-importer / cri-o / ig / libcontainers-common / skopeo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3727 advisory. - A flaw was found in the...

CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.55.0-19

CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.55.0-19. A patched version of the package is available...

CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.57.0-2

CVE-2024-3727 affecting package containerized-data-importer for versions less than 1.57.0-2. A patched version of the package is available...

OPENSUSE-SU-2024:13963-1 containerized-data-importer-api-1.59.0-2.1 on GA media

These are all security issues fixed in the containerized-data-importer-api-1.59.0-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2024:1988-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1988-1 advisory. Rebuild against current updated packages and go compiler. - Bump github.com/containers/image/v5 bsc1224119, CVE-2024-3727 - Ad...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2024:1989-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1989-1 advisory. - Bump github.com/containers/image/v5 bsc1224119, CVE-2024-3727 - Remove SLE15 SP4 from the distro check end of general suppor...