* bsc#1224119 Cross-References: * CVE-2024-3727 . # Security update for containerized-data-importer Announcement ID: SUSE-SU-2025:20055-1 Release Date: 2025-02-03T08:56:47Z Rating: important References: * bsc#1224119 Cross-References: * CVE-2024-3727 CVSS scores: * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2024-3727 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for containerized-data-importer fixes the following issues: * Update to version 1.60.1 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1 * Add registry path for SLE15 SP7 * Bump to the latest tag 1.60.1-150600.3.9.1 * Use the images based on SLE15 SP6 BCI * Bump to the latest tag 1.59.0-150600.3.6.1 * Update to version 1.59.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-160=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * containerized-data-importer-manifests-1.60.1-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1224119 . SUSE Linux Micro 6.0 patch addresses vulnerabilities in containerized-data-importer; CVE-2024-3728 rectified.. SUSE Linux Micro, containerized data importer, important security update, CVE-2024-3727, software patch. . Severity: Important. LinuxSecurity.com Team
* bsc#1224119 Cross-References: * CVE-2024-3727 . # Security update for containerized-data-importer Announcement ID: SUSE-SU-2025:20055-1 Release Date: 2025-02-03T08:56:47Z Rating: important References: * bsc#1224119 Cross-References: * CVE-2024-3727 CVSS scores: * CVE-2024-3727 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2024-3727 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for containerized-data-importer fixes the following issues: * Update to version 1.60.1 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1 * Add registry path for SLE15 SP7 * Bump to the latest tag 1.60.1-150600.3.9.1 * Use the images based on SLE15 SP6 BCI * Bump to the latest tag 1.59.0-150600.3.6.1 * Update to version 1.59.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-160=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * containerized-data-importer-manifests-1.60.1-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-3727.html * https://bugzilla.suse.com/show_bug.cgi?id=1224119 . Important notice for SUSE Linux Micro 6.0 concerning security patch for CVE-2024-3727 affecting the Containerized Data Importer.. SUSE Security, Data Importer Update, Containerized Importer, Micro Version Patch. . Severity: Important. LinuxSecurity.com Team
Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 . # Security update for cdi-apiserver-container, cdi-cloner-container, cdi- controller-container, cdi-importer-container, cdi-operator-container, cdi- uploadproxy-container, cdi-uploadserver-container, cont Announcement ID: SUSE-SU-2024:2668-1 Rating: moderate References: Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller- container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy- container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.59.0 * Release notes importer/releases/tag/v1.59.0 * Release notes importer/releases/tag/v1.58.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-2668=1 openSUSE-SLE-15.5-2024-2668=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-2668=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2668=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-2668=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * containerized-data-importer-controller-debuginfo-1.59.0-150500.6.18.1 * containerized-data-importer-uploadproxy-debuginfo-1.59.0-150500.6.18.1 * containerized-data-importer-uploadserver-debuginfo-1.59.0-150500.6.18.1 *obs-service-cdi_containers_meta-1.59.0-150500.6.18.1 * containerized-data-importer-controller-1.59.0-150500.6.18.1 * containerized-data-importer-api-1.59.0-150500.6.18.1 * containerized-data-importer-importer-1.59.0-150500.6.18.1 * containerized-data-importer-operator-debuginfo-1.59.0-150500.6.18.1 * containerized-data-importer-uploadserver-1.59.0-150500.6.18.1 * containerized-data-importer-operator-1.59.0-150500.6.18.1 * containerized-data-importer-cloner-1.59.0-150500.6.18.1 * containerized-data-importer-uploadproxy-1.59.0-150500.6.18.1 * containerized-data-importer-manifests-1.59.0-150500.6.18.1 * containerized-data-importer-cloner-debuginfo-1.59.0-150500.6.18.1 * containerized-data-importer-api-debuginfo-1.59.0-150500.6.18.1 * containerized-data-importer-importer-debuginfo-1.59.0-150500.6.18.1 * openSUSE Leap Micro 5.5 (x86_64) * containerized-data-importer-manifests-1.59.0-150500.6.18.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * containerized-data-importer-manifests-1.59.0-150500.6.18.1 * Containers Module 15-SP5 (x86_64) * containerized-data-importer-manifests-1.59.0-150500.6.18.1 . This release resolves substantial concerns in various CDI containers for SUSE and openSUSE customers. Please apply the newest updates.. SUSE 15 SP5 Update, cdi-apiserver-container, Container Security Advisory. . LinuxSecurity.com Team
Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 . # Security update for cdi-apiserver-container, cdi-cloner-container, cdi- controller-container, cdi-importer-container, cdi-operator-container, cdi- uploadproxy-container, cdi-uploadserver-container, cont Announcement ID: SUSE-SU-2023:4652-1 Rating: important References: Affected Products: * Containers Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller- container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy- container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.58.0 * Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4652=1 openSUSE-SLE-15.5-2023-4652=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4652=1 * Containers Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2023-4652=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * containerized-data-importer-controller-debuginfo-1.58.0-150500.6.6.1 * containerized-data-importer-manifests-1.58.0-150500.6.6.1 * containerized-data-importer-uploadproxy-1.58.0-150500.6.6.1 * containerized-data-importer-operator-debuginfo-1.58.0-150500.6.6.1 * containerized-data-importer-uploadserver-debuginfo-1.58.0-150500.6.6.1 * containerized-data-importer-operator-1.58.0-150500.6.6.1 * containerized-data-importer-cloner-debuginfo-1.58.0-150500.6.6.1 * containerized-data-importer-controller-1.58.0-150500.6.6.1 * containerized-data-importer-uploadproxy-debuginfo-1.58.0-150500.6.6.1 * containerized-data-importer-api-debuginfo-1.58.0-150500.6.6.1 * containerized-data-importer-importer-debuginfo-1.58.0-150500.6.6.1 * containerized-data-importer-api-1.58.0-150500.6.6.1 * containerized-data-importer-cloner-1.58.0-150500.6.6.1 * obs-service-cdi_containers_meta-1.58.0-150500.6.6.1 * containerized-data-importer-uploadserver-1.58.0-150500.6.6.1 * containerized-data-importer-importer-1.58.0-150500.6.6.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * containerized-data-importer-manifests-1.58.0-150500.6.6.1 * Containers Module 15-SP5 (x86_64) * containerized-data-importer-manifests-1.58.0-150500.6.6.1 . Crucial security update for cdi-apiserver-image and associated platforms in openSUSE and SUSE Linux Enterprise.. Container Security, Important Patches, openSUSE Updates. . Severity: Important. LinuxSecurity.com Team
An update that contains security fixes can now be installed. . SUSE Security Update: Security update for containerized data importer ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3920-1 Rating: important References: Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Module for Containers 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of containerized data importer images rebases the containers against the current base images to resolve security issues. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3920=1 - SUSE Linux Enterprise Module for Containers 15-SP3: zypper in -t patch SUSE-SLE-Module-Containers-15-SP3-2022-3920=1 Package List: - openSUSE Leap 15.3 (x86_64): containerized-data-importer-api-1.43.2-150300.8.11.1 containerized-data-importer-api-debuginfo-1.43.2-150300.8.11.1 containerized-data-importer-cloner-1.43.2-150300.8.11.1 containerized-data-importer-cloner-debuginfo-1.43.2-150300.8.11.1 containerized-data-importer-controller-1.43.2-150300.8.11.1 containerized-data-importer-controller-debuginfo-1.43.2-150300.8.11.1 containerized-data-importer-importer-1.43.2-150300.8.11.1 containerized-data-importer-importer-debuginfo-1.43.2-150300.8.11.1 containerized-data-importer-manifests-1.43.2-150300.8.11.1 containerized-data-importer-operator-1.43.2-150300.8.11.1 containerized-data-importer-operator-debuginfo-1.43.2-150300.8.11.1 containerized-data-importer-uploadproxy-1.43.2-150300.8.11.1 containerized-data-importer-uploadproxy-debuginfo-1.43.2-150300.8.11.1 containerized-data-importer-uploadserver-1.43.2-150300.8.11.1 containerized-data-importer-uploadserver-debuginfo-1.43.2-150300.8.11.1 obs-service-cdi_containers_meta-1.43.2-150300.8.11.1 - SUSE Linux Enterprise Module for Containers 15-SP3 (x86_64): containerized-data-importer-manifests-1.43.2-150300.8.11.1 References: . New version released for the modular data integrator featuring critical security enhancements to improve overall system protection.. SUSE Security Update, Containerized Data Importer, SUSE Linux Enterprise, Security Fix. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.