SUSE-SU-2024:0441-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20240441-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0441-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:0441-1

Published

2024-02-09T15:33:43Z

Modified

2024-02-09T15:33:43Z

Summary

Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

Details

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:

Update to version 1.1.1:

Release notes are on https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1

Fix seccomp profile for post-copy migration
Fix firmware path for aarch64 (/usr/share/AAVMF)
Fix test with initially invalid DataVolume (bsc#1218174)

The containers were also rebuilt against updated go version.

References

Affected packages

SUSE:Linux Enterprise Micro 5.5 / kubevirt

Package

Name: kubevirt
Purl: pkg:rpm/suse/kubevirt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.1.1-150500.8.9.1

Ecosystem specific

{
    "binaries":  [
        {
            "kubevirt-manifests":  "1.1.1-150500.8.9.1",
            "kubevirt-virtctl":  "1.1.1-150500.8.9.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0441-1.json"

SUSE:Linux Enterprise Module for Containers 15 SP5 / kubevirt

Package

Name: kubevirt
Purl: pkg:rpm/suse/kubevirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.1.1-150500.8.9.1

Ecosystem specific

{
    "binaries":  [
        {
            "kubevirt-manifests":  "1.1.1-150500.8.9.1",
            "kubevirt-virtctl":  "1.1.1-150500.8.9.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0441-1.json"

openSUSE:Leap 15.5 / kubevirt

Package

Name: kubevirt
Purl: pkg:rpm/opensuse/kubevirt&distro=openSUSE%20Leap%2015.5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.1.1-150500.8.9.1

Ecosystem specific

{
    "binaries":  [
        {
            "kubevirt-container-disk":  "1.1.1-150500.8.9.1",
            "kubevirt-manifests":  "1.1.1-150500.8.9.1",
            "kubevirt-tests":  "1.1.1-150500.8.9.1",
            "kubevirt-virt-api":  "1.1.1-150500.8.9.1",
            "kubevirt-virt-controller":  "1.1.1-150500.8.9.1",
            "kubevirt-virt-exportproxy":  "1.1.1-150500.8.9.1",
            "kubevirt-virt-exportserver":  "1.1.1-150500.8.9.1",
            "kubevirt-virt-handler":  "1.1.1-150500.8.9.1",
            "kubevirt-virt-launcher":  "1.1.1-150500.8.9.1",
            "kubevirt-virt-operator":  "1.1.1-150500.8.9.1",
            "kubevirt-virtctl":  "1.1.1-150500.8.9.1",
            "obs-service-kubevirt_containers_meta":  "1.1.1-150500.8.9.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0441-1.json"