gpp_maybe Security update for containerized-data-importer

SUSE-SL-Micro-6.2-317

This update for containerized-data-importer fixes the following issues: Update to version 1.64.0. Security issues fixed: - CVE-2024-28180: improper handling of highly compressed data (bsc#1235204). - CVE-2024-45338: denial of service due to non-linear parsing of case-insensitive content (bsc#1235365). - CVE-2025-22868: unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239205).

• Release Date
  Feb 26 2026
• References
  Bugzilla: 1235365, 1239205, 1235204
  CVEs: CVE-2024-45338, CVE-2025-22868, CVE-2024-28180
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.2 x86_64

• Packages
  containerized-data-importer-manifests
  YAML manifests used to install CDI

  1.64.0-160000.1.1 lock rpm