PT-2023-36148 · Unknown · Cdi-Apiserver-Container+7

Published 2023-04-24 · Updated 2023-04-24

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions cdi-apiserver-container (affected versions not specified) cdi-cloner-container (affected versions not specified) cdi-controller-container (affected versions not specified) cdi-importer-container (affected versions not specified) cdi-operator-container (affected versions not specified) cdi-uploadproxy-container (affected versions not specified) cdi-uploadserver-container (affected versions not specified) containerized-data-importer (affected versions not specified)

Description The issue is related to the containerized-data-importer being built with an unsupported golang compiler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

SUSE-SU-2023:1966-1

Affected Products

Cdi-Apiserver-Container

Cdi-Cloner-Container

Cdi-Controller-Container

Cdi-Importer-Container

Cdi-Operator-Container

Cdi-Uploadproxy-Container

Cdi-Uploadserver-Container

Containerized-Data-Importer

References · 3

• https://osv.dev/vulnerability/SUSE-SU-2023:1966-1 · Vendor Advisory
• https://suse.com/support/update/announcement/2023/suse-su-20231966-1 · Note
• https://bugzilla.suse.com/1208916 · Note