Skip to content

Commit 85a07a8

Browse files
CBL-Mariner-BotKanishk Bansalxordux
authored
[AUTOPATCHER-CORE] Upgrade kubevirt to 1.5.3 for CVE-2025-64437, CVE-2025-64433, CVE-2025-64434, CVE-2025-64432 (microsoft#15044)
Signed-off-by: Kanishk Bansal <[email protected]> Co-authored-by: Kanishk Bansal <[email protected]> Co-authored-by: Rohit Rawat <[email protected]>
1 parent 75c29ae commit 85a07a8

File tree

4 files changed

+10
-147
lines changed

4 files changed

+10
-147
lines changed

SPECS/kubevirt/CVE-2025-22869.patch

Lines changed: 0 additions & 140 deletions
This file was deleted.
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
22
"Signatures": {
3-
"kubevirt-1.5.0.tar.gz": "35f3c1939ba8101c0566c277379b2badea557aa865cfcb843e52387aceca5470"
3+
"kubevirt-1.5.3.tar.gz": "93518543f92fa6a9a16e7b6653745d6a2562c52b21af81769bf85ac6e67df5fa"
44
}
55
}

SPECS/kubevirt/kubevirt.spec

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,8 @@
1919

2020
Summary: Container native virtualization
2121
Name: kubevirt
22-
Version: 1.5.0
23-
Release: 5%{?dist}
22+
Version: 1.5.3
23+
Release: 1%{?dist}
2424
License: ASL 2.0
2525
Vendor: Microsoft Corporation
2626
Distribution: Azure Linux
@@ -30,8 +30,8 @@ Source0: https://github.com/kubevirt/kubevirt/archive/refs/tags/v%{versio
3030
# The containers_meta packages and associated files are not required for the Mariner build
3131
# Nexus team needs these to-be-upstreamed patches for the operator Edge to work
3232
# correctly.
33-
Patch0: CVE-2025-22869.patch
34-
Patch1: CVE-2025-22872.patch
33+
34+
Patch0: CVE-2025-22872.patch
3535

3636
%global debug_package %{nil}
3737
BuildRequires: swtpm-tools
@@ -269,6 +269,9 @@ install -p -m 0644 cmd/virt-launcher/qemu.conf %{buildroot}%{_datadir}/kube-virt
269269
%{_bindir}/virt-tests
270270

271271
%changelog
272+
* Mon Nov 10 2025 CBL-Mariner Servicing Account <[email protected]> - 1.5.3-1
273+
- Auto-upgrade to 1.5.3 - for CVE-2025-64437, CVE-2025-64433, CVE-2025-64434, CVE-2025-64432
274+
272275
* Thu Oct 23 2025 Kanishk Bansal <[email protected]> - 1.5.0-5
273276
- Bump to rebuild with updated glibc
274277

cgmanifest.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8561,8 +8561,8 @@
85618561
"type": "other",
85628562
"other": {
85638563
"name": "kubevirt",
8564-
"version": "1.5.0",
8565-
"downloadUrl": "https://github.com/kubevirt/kubevirt/archive/refs/tags/v1.5.0.tar.gz"
8564+
"version": "1.5.3",
8565+
"downloadUrl": "https://github.com/kubevirt/kubevirt/archive/refs/tags/v1.5.3.tar.gz"
85668566
}
85678567
}
85688568
},

0 commit comments

Comments
 (0)