Security update for kubevirt1.8 (important)

openSUSE security update: security update for kubevirt1.8 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21590-1 Rating: important References: bsc1262265 bsc1265736 bsc1266151 bsc1266575 bsc1267120 bsc1269093 bsc1272011 bsc1272604 bsc1272840...

Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-cont

This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6,...

Security update for kubevirt

This update for kubevirt fixes the following issue: CVE-2026-13622: virt-handler migration proxy follows symlinks, allowing container escape to host bsc1272840. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

CVE-2026-13622 Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host

A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-handler dials Unix sockets inside the target virt-launcher pod via /proc//root/ paths using net.Dial without symlink protection. These socket paths reside in qemu-owned directories...