SUSE-SU-2024:1158-1 This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handl

Not scored Published

Security update for KubeVirt components involving rebuilds and configuration cleanups, requiring attention from virtualization infrastructure administrators.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is SUSE-SU-2024:1158-1?

SUSE-SU-2024:1158-1 is a vulnerability in kubevirt, published on 8 Apr 2024.

Official description

This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:

  • rebuild against current security updates

  • Install qemu-hw-usb-host to enable USB passthrough (bsc#1221538)

  • Group together arch specific parts of the code

  • Cleanup after writing config files with augtool

Which versions are affected by SUSE-SU-2024:1158-1?

Linux distribution packages (3)
kubevirt SUSE:Linux Enterprise Micro 5.5All versions1.1.1-150500.8.12.1
kubevirt SUSE:Linux Enterprise Module for Containers 15 SP5All versions1.1.1-150500.8.12.1
kubevirt openSUSE:Leap 15.5All versions1.1.1-150500.8.12.1

How do I fix SUSE-SU-2024:1158-1?

Apply the vendor's patch.

Is SUSE-SU-2024:1158-1 being exploited?

There is no known exploitation of SUSE-SU-2024:1158-1 in the wild and no public exploit code.

Sources

Is SUSE-SU-2024:1158-1 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free