Skip to content

Commit d0c06aa

Browse files
harshitgupta1337Harshit Gupta
andauthored
Upgrade KubeVirt to v1.7.1 and add TPM patches to libvirt (#16258)
Upgrades KubeVirt from 1.7.0 to 1.7.1 to include upstream bug fixes. Add patches to Libvirt that improve stability during live-migration of VMs with vTPM device. Signed-off-by: Harshit Gupta <guptaharshit@microsoft.com> Co-authored-by: Harshit Gupta <guptaharshit@microsoft.com>
1 parent 43449f6 commit d0c06aa

9 files changed

Lines changed: 456 additions & 234 deletions

SPECS/kubevirt/CVE-2025-47911.patch

Lines changed: 0 additions & 100 deletions
This file was deleted.

SPECS/kubevirt/CVE-2025-58190.patch

Lines changed: 0 additions & 126 deletions
This file was deleted.
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
22
"Signatures": {
3-
"kubevirt-1.7.0.tar.gz": "71bc21163ada3e39c55c19f88c057ad0194e97043441d471f2bfd51782550a2f"
3+
"kubevirt-1.7.1.tar.gz": "2a613fe591ddd1a0f70fa459065c17180ec7f67cf0906ec13f352b51b3cd2c2d"
44
}
55
}

SPECS/kubevirt/kubevirt.spec

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,17 +19,15 @@
1919

2020
Summary: Container native virtualization
2121
Name: kubevirt
22-
Version: 1.7.0
23-
Release: 3%{?dist}
22+
Version: 1.7.1
23+
Release: 1%{?dist}
2424
License: ASL 2.0
2525
Vendor: Microsoft Corporation
2626
Distribution: Azure Linux
2727
Group: System/Management
2828
URL: https://github.com/kubevirt/kubevirt
2929
Source0: https://github.com/kubevirt/kubevirt/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
3030
Patch0: CVE-2025-11065.patch
31-
Patch1: CVE-2025-47911.patch
32-
Patch2: CVE-2025-58190.patch
3331

3432
%global debug_package %{nil}
3533
BuildRequires: swtpm-tools
@@ -267,6 +265,11 @@ install -p -m 0644 cmd/virt-launcher/qemu.conf %{buildroot}%{_datadir}/kube-virt
267265
%{_bindir}/virt-tests
268266

269267
%changelog
268+
* Wed Feb 25 2026 Harshit Gupta <guptaharshit@microsoft.com> - 1.7.1-1
269+
- Upgrade KubeVirt to v1.7.1
270+
- Remove CVE-2025-47911.patch and CVE-2025-58190.patch since
271+
vulnerable versions of golang.org/x/net/html no longer used in 1.7.1
272+
270273
* Fri Feb 20 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 1.7.0-3
271274
- Patch for CVE-2025-58190, CVE-2025-47911
272275

0 commit comments

Comments
 (0)