This update for kubevirt, virt-api-container, virt-controller-container, virt-
exportproxy-container, virt-exportserver-container, virt-handler-container,
virt-launcher-container, virt-libguestfs-tools-container, virt-operator-
container, virt-pr-helper-container fixes the following issues:
This update for kubevirt updates golang.org/x/net to 0.38.0, fixing security
issues (CVE-2025-22872, CVE-2024-45337, CVE-2024-45338, bsc#1234537,
bsc#1235303, bsc#1241772) and also rebuilds it against current GO.
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch SUSE-2025-3278=1 openSUSE-SLE-15.6-2025-3278=1
* Containers Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Containers-15-SP6-2025-3278=1
* openSUSE Leap 15.6 (aarch64 x86_64)
* kubevirt-virt-api-debuginfo-1.4.1-150600.5.24.1
* kubevirt-virt-exportserver-debuginfo-1.4.1-150600.5.24.1
* kubevirt-virt-exportproxy-debuginfo-1.4.1-150600.5.24.1
* kubevirt-virtctl-1.4.1-150600.5.24.1
* kubevirt-virt-launcher-debuginfo-1.4.1-150600.5.24.1
* kubevirt-container-disk-1.4.1-150600.5.24.1
* kubevirt-virtctl-debuginfo-1.4.1-150600.5.24.1
* kubevirt-virt-api-1.4.1-150600.5.24.1
* kubevirt-virt-controller-1.4.1-150600.5.24.1
* kubevirt-virt-exportserver-1.4.1-150600.5.24.1
* kubevirt-container-disk-debuginfo-1.4.1-150600.5.24.1
* kubevirt-virt-launcher-1.4.1-150600.5.24.1
* kubevirt-virt-operator-1.4.1-150600.5.24.1
* kubevirt-tests-debuginfo-1.4.1-150600.5.24.1
* kubevirt-virt-exportproxy-1.4.1-150600.5.24.1
* kubevirt-virt-controller-debuginfo-1.4.1-150600.5.24.1
* kubevirt-pr-helper-conf-1.4.1-150600.5.24.1
* kubevirt-tests-1.4.1-150600.5.24.1
* kubevirt-virt-handler-1.4.1-150600.5.24.1
* kubevirt-manifests-1.4.1-150600.5.24.1
*...
Read the Full Advisory* bsc#1234537
* bsc#1235303
* bsc#1241772
## References:
* https://www.suse.com/security/cve/CVE-2024-45337.html
* https://www.suse.com/security/cve/CVE-2024-45338.html
* https://www.suse.com/security/cve/CVE-2025-22872.html
* https://bugzilla.suse.com/show_bug.cgi?id=1234537
* https://bugzilla.suse.com/show_bug.cgi?id=1235303
* https://bugzilla.suse.com/show_bug.cgi?id=1241772
Get the latest Linux and open source security news straight to your inbox.