kubevirt: Upgrade to 1.7.0

- Remove CVE-2025-47913.patch (ssh/agent package no longer vendored)
- Remove CVE-2025-64435.patch (fixed upstream via PR#15680)
- Bump golang BuildRequires to >= 1.24 per upstream PR#15784

Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>

Author: aadhar-agarwal

SPECS/kubevirt/CVE-2025-47913.patch

@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "kubevirt-1.6.3.tar.gz": "9d41ac421d7af1c25a2b5c370dc597b67e6fc2762ab03ddf4745f71cad5fb4e2"
+    "kubevirt-1.7.0.tar.gz": "71bc21163ada3e39c55c19f88c057ad0194e97043441d471f2bfd51782550a2f"
   }
 }

SPECS/kubevirt/CVE-2025-64435.patch

@@ -19,25 +19,20 @@
 
 Summary:        Container native virtualization
 Name:           kubevirt
-Version:        1.6.3
-Release:        3%{?dist}
+Version:        1.7.0
+Release:        1%{?dist}
 License:        ASL 2.0
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
 Group:          System/Management
 URL:            https://github.com/kubevirt/kubevirt
 Source0:        https://github.com/kubevirt/kubevirt/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
-# The containers_meta packages and associated files are not required for the Mariner build
-# Nexus team needs these to-be-upstreamed patches for the operator Edge to work
-# correctly.
-Patch0:         CVE-2025-47913.patch
-Patch1:         CVE-2025-64435.patch
 
 %global debug_package %{nil}
 BuildRequires:  swtpm-tools
 BuildRequires:  glibc-devel
 BuildRequires:  glibc-static >= 2.38-18%{?dist}
-BuildRequires:  golang >= 1.21
+BuildRequires:  golang >= 1.24
 BuildRequires:  golang-packaging
 BuildRequires:  pkgconfig
 BuildRequires:  rsync
@@ -269,6 +264,12 @@ install -p -m 0644 cmd/virt-launcher/qemu.conf %{buildroot}%{_datadir}/kube-virt
 %{_bindir}/virt-tests
 
 %changelog
+* Tue Feb 04 2026 Aadhar Agarwal <aadagarwal@microsoft.com> - 1.7.0-1
+- Upgrade to 1.7.0
+- Remove CVE-2025-47913.patch - vulnerable ssh/agent package no longer vendored in 1.7.0
+- Remove CVE-2025-64435.patch - fixed upstream via PR#15680 (controller_ref.go removed)
+- Bump golang BuildRequires to >= 1.24 per upstream PR#15784
+
 * Thu Jan 22 2026 Kanishk Bansal <kanbansal@microsoft.com> - 1.6.3-3
 - Bump to rebuild with updated glibc
 

SPECS/kubevirt/kubevirt.signatures.json

@@ -8571,8 +8571,8 @@
         "type": "other",
         "other": {
           "name": "kubevirt",
-          "version": "1.6.3",
-          "downloadUrl": "https://github.com/kubevirt/kubevirt/archive/refs/tags/v1.6.3.tar.gz"
+          "version": "1.7.0",
+          "downloadUrl": "https://github.com/kubevirt/kubevirt/archive/refs/tags/v1.7.0.tar.gz"
         }
       }
     },