SUSE-SU-2026:3203-1: kubevirt&distro=SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:3203-1 is a vulnerability in kubevirt&distro=SUSE Linux Enterprise Module for Containers 15 SP7 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 21 · Downstream 0 · Related 21Timeline
- 23-07-2026PublishedVulnerability first disclosed.
- 24-07-2026Last modifiedVulnerability information updated.
Description
Security update for kubevirt This update for kubevirt fixes the following issues: - Security: re-vendor the bundled Go dependencies (no upstream source changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor): * golang.org/x/net v0.48.0 -> v0.55.0: CVE-2026-33814 (bsc#1265736), CVE-2026-39821 (bsc#1266575), CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506 (bsc#1267120) * golang.org/x/crypto v0.46.0 -> v0.52.0: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 (bsc#1266151) * github.com/moby/spdystream v0.5.0 -> v0.5.1 folded into the vendor tree; - Build with Go >= 1.25 (required by golang.org/x/net 0.55).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- kubevirt&distro=SUSE Linux Enterprise Module for Containers 15 SP7< 1.7.4-150700.3.30.1
1 vendor · 1 product