Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-t
| Announcement ID: |
SUSE-SU-2024:2246-1 |
| Rating: |
important |
| References: |
|
|
Cross-References:
|
|
| CVSS scores: |
-
CVE-2024-33394
(
SUSE
):
6.0
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
|
| Affected Products: |
- Containers Module 15-SP5
- openSUSE Leap 15.5
- SUSE Linux Enterprise High Performance Computing 15 SP5
- SUSE Linux Enterprise Micro 5.5
- SUSE Linux Enterprise Real Time 15 SP5
- SUSE Linux Enterprise Server 15 SP5
- SUSE Linux Enterprise Server for SAP Applications 15 SP5
|
An update that solves one vulnerability can now be installed.
Description:
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues:
- Collect component Role rules under operator Role instead of
ClusterRole (bsc#1223965, CVE-2024-33394)
- Ensure procps is installed (provides ps for tests)
This update also rebuilds it against current go releases.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.5
zypper in -t patch SUSE-2024-2246=1 openSUSE-SLE-15.5-2024-2246=1
-
SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2024-2246=1
-
Containers Module 15-SP5
zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-2246=1
Package List:
-
openSUSE Leap 15.5 (x86_64)
- kubevirt-virt-exportserver-1.1.1-150500.8.18.1
- kubevirt-pr-helper-conf-1.1.1-150500.8.18.1
- kubevirt-virt-exportserver-debuginfo-1.1.1-150500.8.18.1
- kubevirt-virt-handler-1.1.1-150500.8.18.1
- kubevirt-virt-handler-debuginfo-1.1.1-150500.8.18.1
- kubevirt-virt-launcher-debuginfo-1.1.1-150500.8.18.1
- kubevirt-manifests-1.1.1-150500.8.18.1
- kubevirt-virtctl-1.1.1-150500.8.18.1
- obs-service-kubevirt_containers_meta-1.1.1-150500.8.18.1
- kubevirt-tests-1.1.1-150500.8.18.1
- kubevirt-container-disk-1.1.1-150500.8.18.1
- kubevirt-virt-launcher-1.1.1-150500.8.18.1
- kubevirt-virt-exportproxy-1.1.1-150500.8.18.1
- kubevirt-tests-debuginfo-1.1.1-150500.8.18.1
- kubevirt-virt-exportproxy-debuginfo-1.1.1-150500.8.18.1
- kubevirt-virt-controller-debuginfo-1.1.1-150500.8.18.1
- kubevirt-container-disk-debuginfo-1.1.1-150500.8.18.1
- kubevirt-virt-api-1.1.1-150500.8.18.1
- kubevirt-virt-operator-1.1.1-150500.8.18.1
- kubevirt-virt-operator-debuginfo-1.1.1-150500.8.18.1
- kubevirt-virtctl-debuginfo-1.1.1-150500.8.18.1
- kubevirt-virt-controller-1.1.1-150500.8.18.1
- kubevirt-virt-api-debuginfo-1.1.1-150500.8.18.1
-
SUSE Linux Enterprise Micro 5.5 (x86_64)
- kubevirt-virtctl-1.1.1-150500.8.18.1
- kubevirt-manifests-1.1.1-150500.8.18.1
- kubevirt-virtctl-debuginfo-1.1.1-150500.8.18.1
-
Containers Module 15-SP5 (x86_64)
- kubevirt-virtctl-1.1.1-150500.8.18.1
- kubevirt-manifests-1.1.1-150500.8.18.1
- kubevirt-virtctl-debuginfo-1.1.1-150500.8.18.1
References: