kubevirt1.8-container-disk-1.8.4-3.1 on GA media (moderate)

kubevirt1.8-container-disk-1.8.4-3.1 on GA media Announcement ID: openSUSE-SU-2026:11392-1 Rating: moderate Cross-References: CVE-2026-13201 CVE-2026-46600 CVE-2026-56852 CVSS scores: CVE-2026-13201 SUSE : 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L CVE-2026-46600 SUSE : 6.5...

CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8

CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8. A patched version of the package is available...

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...

OPENSUSE-SU-2026:11392-1 kubevirt1.8-container-disk-1.8.4-3.1 on GA media

These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-3.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:3203-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3203-1 advisory. - Security: re-vendor the bundled Go dependencies no upstream source changes; tarball rebuilt from v1.7.4 with updated go.mod/vendo...

Security update for kubevirt

This update for kubevirt fixes the following issues: Security: re-vendor the bundled Go dependencies no upstream source changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor: golang.org/x/net v0.48.0 - v0.55.0: CVE-2026-33814 bsc1265736, CVE-2026-39821 bsc1266575, CVE-2026-25680,...

SUSE-SU-2026:3203-1 Security update for kubevirt

This update for kubevirt fixes the following issues: - Security: re-vendor the bundled Go dependencies no upstream source changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor: golang.org/x/net v0.48.0 - v0.55.0: CVE-2026-33814 bsc1265736, CVE-2026-39821 bsc1266575, CVE-2026-25680,...

kubevirt1.8-container-disk-1.8.4-2.1 on GA media (moderate)

kubevirt1.8-container-disk-1.8.4-2.1 on GA media Announcement ID: openSUSE-SU-2026:11314-1 Rating: moderate Cross-References: CVE-2026-27136 CVE-2026-33814 CVE-2026-39821 CVE-2026-39827 CVE-2026-39828 CVE-2026-39832 CVE-2026-42508 CVSS scores: CVE-2026-27136 SUSE : 6.1...

OPENSUSE-SU-2026:11314-1 kubevirt1.8-container-disk-1.8.4-2.1 on GA media

These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-62017

These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-2.1 package on the GA media of openSUSE Tumbleweed...

kubevirt1.8-container-disk-1.8.4-1.1 on GA media (moderate)

kubevirt1.8-container-disk-1.8.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11307-1 Rating: moderate Cross-References: CVE-2026-35469 CVSS scores: CVE-2026-35469 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-35469 SUSE : 7.1...

OPENSUSE-SU-2026:11307-1 kubevirt1.8-container-disk-1.8.4-1.1 on GA media

These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kubevirt-1.6 (SUSE-SU-2026:2783-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2783-1 advisory. - CVE-2026-9804: Symlink escape in the VMExport dir handler let an attacker controlling an exported PVC read sensitive files TLS...

CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5

CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5. A patched version of the package is available...

CVE-2026-25681 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5

CVE-2026-25681 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5. A patched version of the package is available...

CVE-2026-42502 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5

CVE-2026-42502 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5. A patched version of the package is available...

GO-2026-5883 KubeVirt has a Link Following issue in kubevirt.io/kubevirt

KubeVirt has a Link Following issue in kubevirt.io/kubevirt...

GO-2026-5848 KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt

KubeVirt has a Link Following vulnerability in kubevirt.io/kubevirt...

Security update for kubevirt-1.6

This update for kubevirt-1.6 fixes the following issues: CVE-2026-9804: Symlink escape in the VMExport dir handler let an attacker controlling an exported PVC read sensitive files TLS keys, tokens, service-account creds from the exporter pod. bsc1266733 CVE-2025-14525: A VM reporting many...

SUSE CVE-2026-13218

A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can plant a symlink at the cache file path, causin...