gpp_maybe Security update for kubevirt

SUSE-SLE-Module-Containers-15-SP7-2026-3203

This update for kubevirt fixes the following issues: - Security: re-vendor the bundled Go dependencies (no upstream source changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor): * golang.org/x/net v0.48.0 -> v0.55.0: CVE-2026-33814 (bsc#1265736), CVE-2026-39821 (bsc#1266575), CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506 (bsc#1267120) * golang.org/x/crypto v0.46.0 -> v0.52.0: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 (bsc#1266151) * github.com/moby/spdystream v0.5.0 -> v0.5.1 folded into the vendor tree; - Build with Go >= 1.25 (required by golang.org/x/net 0.55).

• Release Date
  Jul 23 2026
• References
  Bugzilla: 1266575, 1267120, 1266151, 1262265, 1265736
  CVEs: CVE-2026-46597, CVE-2026-39831, CVE-2026-42508, CVE-2026-39835, CVE-2026-46595, CVE-2026-33814, CVE-2026-39830, CVE-2026-39834, CVE-2026-42502, CVE-2026-39829, CVE-2026-35469, CVE-2026-39827, CVE-2026-25681, CVE-2026-39832, CVE-2026-42506, CVE-2026-39828, CVE-2026-27136, CVE-2026-25680, CVE-2026-39833, CVE-2026-46598, CVE-2026-39821
• Type
  security
• Severity
  important

cloud_download Downloads

Containers Module 15.7 aarch64

• Packages
  kubevirt
  Container native virtualization

  1.7.4-150700.3.30.1 lock src

  kubevirt-manifests
  YAML manifests used to install kubevirt

  1.7.4-150700.3.30.1 lock rpm

  kubevirt-virtctl
  Client for managing kubevirt

  1.7.4-150700.3.30.1 lock rpm

Containers Module 15.7 x86_64

• Packages
  kubevirt
  Container native virtualization

  1.7.4-150700.3.30.1 lock src

  kubevirt-manifests
  YAML manifests used to install kubevirt

  1.7.4-150700.3.30.1 lock rpm

  kubevirt-virtctl
  Client for managing kubevirt

  1.7.4-150700.3.30.1 lock rpm