Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issues: Update to version 1.60.1 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1 Add registry path for SLE15 SP7 Bump to the latest tag 1.60.1-150600.3.9.1 Use the images based on SLE15 SP6...

SUSE-SU-2025:20055-1 Security update for containerized-data-importer

This update for containerized-data-importer fixes the following issues: - Update to version 1.60.1 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1 - Add registry path for SLE15 SP7 - Bump to the latest tag 1.60.1-150600.3.9.1 - Use the images based on...

CVE-2024-28180 affecting package containerized-data-importer for versions less than 1.57.0-9

CVE-2024-28180 affecting package containerized-data-importer for versions less than 1.57.0-9. A patched version of the package is available...

CVE-2023-39325 affecting package containerized-data-importer for versions less than 1.57.0-8

CVE-2023-39325 affecting package containerized-data-importer for versions less than 1.57.0-8. A patched version of the package is available...

SUSE SLES15 Security Update : cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer (SUSE-SU-2025:0216-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0216-1 advisory. - Install nbdkit-server to avoid pulling unneeded dependencies - rebuild against current GO Tenable has extracted the preceding description...

SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2025:0217-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0217-1 advisory. Update to version 1.61.0: Release notes - https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.61.0 -...

Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.61.0: Release notes...

SUSE-SU-2025:0217-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.61.0: Release notes -...

PT-2025-5678 · Unknown +1 · Nbdkit-Server +9

Name of the Vulnerable Software and Affected Versions: cdi-apiserver-container affected versions not specified cdi-cloner-container affected versions not specified cdi-controller-container affected versions not specified cdi-importer-container affected versions not specified cdi-operator-containe...

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.57.0-7

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.57.0-7. A patched version of the package is available...

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22

CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22. A patched version of the package is available...

AZL-54527 CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.55.0-22

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54440 CVE-2024-45338 affecting package containerized-data-importer for versions less than 1.57.0-8

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6. A patched version of the package is available...

Moderate: toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fixes: golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in...

The vulnerability of the Containerized Routing Protocol Daemon (cRPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Containerized Routing Protocol Daemon cRPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...

CVE-2022-32149 affecting package containerized-data-importer for versions less than 1.55.0-20

CVE-2022-32149 affecting package containerized-data-importer for versions less than 1.55.0-20. A patched version of the package is available...

CVE-2024-28180 affecting package containerized-data-importer for versions less than 1.55.0-20

CVE-2024-28180 affecting package containerized-data-importer for versions less than 1.55.0-20. A patched version of the package is available...

CVE-2022-41717 affecting package containerized-data-importer for versions less than 1.55.0-20

CVE-2022-41717 affecting package containerized-data-importer for versions less than 1.55.0-20. A patched version of the package is available...

Our Takeaways From 2024 Gartner Market Guide for Cloud-Native Application Protection Platforms (CNAPP): Insights and Market Evolution

Are your cloud-native applications and multi-cloud infrastructure adequately protected against evolving threats? How confident are you in your current security measures for cloud workloads and containerized environments? The recent Gartner Market Guide for Cloud-Native Application Protection...