{"id":"SUSE-SU-2023:4357-1","aliases":[],"status":"published","title":"Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container","description":"This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:\n\nkubevirt is rebuilt against the current GO security release.\n\n- Set cache mode on hotplugged disks\n- Delete VMI prior to NFS server pod in tests","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-11-03T11:04:57Z","modified":"2023-11-03T11:04:57Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kubevirt","fixed_in":["0.54.0-150400.3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kubevirt","fixed_in":["0.54.0-150400.3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP4","package":"kubevirt","fixed_in":["0.54.0-150400.3.23.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"kubevirt","fixed_in":["0.54.0-150400.3.23.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"kubevirt","fixed_in":["0.54.0-150400.3.23.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"kubevirt","fixed_in":["0.54.0-150400.3.23.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-150400.3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-150400.3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP4","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-150400.3.23.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-150400.3.23.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-150400.3.23.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.54.0-150400.3.23.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234357-1/","tags":["advisory"]}],"sources":{"osv":[{"id":"SUSE-SU-2023:4357-1","title":"Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container","description":"This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues:\n\nkubevirt is rebuilt against the current GO security release.\n\n- Set cache mode on hotplugged disks\n- Delete VMI prior to NFS server pod in tests\n","status":"published","published":"2023-11-03T11:04:57Z","modified":"2023-11-03T11:04:57Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}