SUSE-SU-2024:0441-1 This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handl
Update KubeVirt to fix seccomp profiles, firmware paths, and DataVolume tests, ensuring secure virtualization operations.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- Available
What is SUSE-SU-2024:0441-1?
SUSE-SU-2024:0441-1 is a vulnerability in kubevirt, published on 9 Feb 2024.
Official description
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:
Update to version 1.1.1:
Release notes are on https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1
Fix seccomp profile for post-copy migration
Fix firmware path for aarch64 (/usr/share/AAVMF)
Fix test with initially invalid DataVolume (bsc#1218174)
The containers were also rebuilt against updated go version.
Which versions are affected by SUSE-SU-2024:0441-1?
Linux distribution packages (3)
kubevirt SUSE:Linux Enterprise Micro 5.5 | All versions | 1.1.1-150500.8.9.1 |
kubevirt SUSE:Linux Enterprise Module for Containers 15 SP5 | All versions | 1.1.1-150500.8.9.1 |
kubevirt openSUSE:Leap 15.5 | All versions | 1.1.1-150500.8.9.1 |
How do I fix SUSE-SU-2024:0441-1?
Upgrade to a fixed version.
Is SUSE-SU-2024:0441-1 being exploited?
There is no known exploitation of SUSE-SU-2024:0441-1 in the wild and no public exploit code.