< back to search

gpp_maybe Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
SUSE-SLE-Module-Containers-15-SP7-2025-4330

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: Updated kubevirt to version 1.6.3: - CVE-2025-22872: Fixed incorrect interpretation of tags leading content to be placed wrong scope during DOM construction in golang.org/x/net/html (bsc#1241772) - CVE-2025-64432: Fixed bypass of RBAC controls due to incorrect validation of certain fields in the client TLS certificate (bsc#1253181) - CVE-2025-64433: Fixed arbitrary files read via improper symlink handling (bsc#1253185) - CVE-2025-64434: Fixed privilege escalation via virt-api impersonification due to compromise virt-handler instance (bsc#1253186) - CVE-2025-64437: Fixed mishandling of symlinks (bsc#1253194) - CVE-2025-64324: Fixed a logic bug that allows an attacker to read and write arbitrary files owned by more privileged users (bsc#1253748)

cloud_download Downloads

Containers Module 15.7 aarch64
  • Packages
    kubevirt
    Container native virtualization
    1.6.3-150700.3.13.1 lock src
    kubevirt-manifests
    YAML manifests used to install kubevirt
    1.6.3-150700.3.13.1 lock rpm
    kubevirt-virtctl
    Client for managing kubevirt
    1.6.3-150700.3.13.1 lock rpm
Containers Module 15.7 x86_64
  • Packages
    kubevirt
    Container native virtualization
    1.6.3-150700.3.13.1 lock src
    kubevirt-manifests
    YAML manifests used to install kubevirt
    1.6.3-150700.3.13.1 lock rpm
    kubevirt-virtctl
    Client for managing kubevirt
    1.6.3-150700.3.13.1 lock rpm