-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================                   Red Hat Security Advisory

Synopsis:          Important: OpenShift Virtualization 4.11.0 Images security and bug fix update
Advisory ID:       RHSA-2022:6526-01
Product:           cnv
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:6526
Issue date:        2022-09-14
CVE Names:         CVE-2018-25032 CVE-2019-5827 CVE-2019-13750 
                   CVE-2019-13751 CVE-2019-17594 CVE-2019-17595 
                   CVE-2019-18218 CVE-2019-19603 CVE-2019-20838 
                   CVE-2020-13435 CVE-2020-14155 CVE-2020-17541 
                   CVE-2020-24370 CVE-2020-35492 CVE-2021-3580 
                   CVE-2021-3634 CVE-2021-3737 CVE-2021-4115 
                   CVE-2021-4189 CVE-2021-20231 CVE-2021-20232 
                   CVE-2021-23177 CVE-2021-25219 CVE-2021-31535 
                   CVE-2021-31566 CVE-2021-36084 CVE-2021-36085 
                   CVE-2021-36086 CVE-2021-36087 CVE-2021-38185 
                   CVE-2021-38561 CVE-2021-40528 CVE-2021-43527 
                   CVE-2021-44716 CVE-2021-44717 CVE-2022-0778 
                   CVE-2022-1271 CVE-2022-1292 CVE-2022-1621 
                   CVE-2022-1629 CVE-2022-1798 CVE-2022-2068 
                   CVE-2022-2097 CVE-2022-21698 CVE-2022-22576 
                   CVE-2022-23772 CVE-2022-23773 CVE-2022-23806 
                   CVE-2022-24407 CVE-2022-24675 CVE-2022-24921 
                   CVE-2022-25313 CVE-2022-25314 CVE-2022-27191 
                   CVE-2022-27774 CVE-2022-27776 CVE-2022-27782 
                   CVE-2022-28327 CVE-2022-29824 
====================================================================
1. Summary:

Red Hat OpenShift Virtualization release 4.11.0 is now available with
updates to packages and images that fix several bugs and add enhancements.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Description:

OpenShift Virtualization is Red Hat's virtualization solution designed for
Red Hat OpenShift Container Platform.

This advisory contains the following OpenShift Virtualization 4.11.0
images:

RHEL-8-CNV-4.11
==============hostpath-provisioner-container-v4.11.0-21
kubevirt-tekton-tasks-operator-container-v4.11.0-29
kubevirt-template-validator-container-v4.11.0-17
bridge-marker-container-v4.11.0-26
hostpath-csi-driver-container-v4.11.0-21
cluster-network-addons-operator-container-v4.11.0-26
ovs-cni-marker-container-v4.11.0-26
virtio-win-container-v4.11.0-16
ovs-cni-plugin-container-v4.11.0-26
kubemacpool-container-v4.11.0-26
hostpath-provisioner-operator-container-v4.11.0-24
cnv-containernetworking-plugins-container-v4.11.0-26
kubevirt-ssp-operator-container-v4.11.0-54
virt-cdi-uploadserver-container-v4.11.0-59
virt-cdi-cloner-container-v4.11.0-59
virt-cdi-operator-container-v4.11.0-59
virt-cdi-importer-container-v4.11.0-59
virt-cdi-uploadproxy-container-v4.11.0-59
virt-cdi-controller-container-v4.11.0-59
virt-cdi-apiserver-container-v4.11.0-59
kubevirt-tekton-tasks-modify-vm-template-container-v4.11.0-7
kubevirt-tekton-tasks-create-vm-from-template-container-v4.11.0-7
kubevirt-tekton-tasks-copy-template-container-v4.11.0-7
checkup-framework-container-v4.11.0-67
kubevirt-tekton-tasks-cleanup-vm-container-v4.11.0-7
kubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.0-7
kubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.0-7
kubevirt-tekton-tasks-disk-virt-customize-container-v4.11.0-7
vm-network-latency-checkup-container-v4.11.0-67
kubevirt-tekton-tasks-create-datavolume-container-v4.11.0-7
hyperconverged-cluster-webhook-container-v4.11.0-95
cnv-must-gather-container-v4.11.0-62
hyperconverged-cluster-operator-container-v4.11.0-95
kubevirt-console-plugin-container-v4.11.0-83
virt-controller-container-v4.11.0-105
virt-handler-container-v4.11.0-105
virt-operator-container-v4.11.0-105
virt-launcher-container-v4.11.0-105
virt-artifacts-server-container-v4.11.0-105
virt-api-container-v4.11.0-105
libguestfs-tools-container-v4.11.0-105
hco-bundle-registry-container-v4.11.0-587

Security Fix(es):

* golang: net/http: limit growth of header canonicalization cache
(CVE-2021-44716)

* kubeVirt: Arbitrary file read on the host from KubeVirt VMs
(CVE-2022-1798)

* golang: out-of-bounds read in golang.org/x/text/language leads to DoS
(CVE-2021-38561)

* golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717)

* prometheus/client_golang: Denial of service using
InstrumentHandlerCounter (CVE-2022-21698)

* golang: math/big: uncontrolled memory consumption due to an unhandled
overflow via Rat.SetString (CVE-2022-23772)

* golang: cmd/go: misinterpretation of branch names can lead to incorrect
access control (CVE-2022-23773)

* golang: crypto/elliptic: IsOnCurve returns true for invalid field
elements (CVE-2022-23806)

* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)

* golang: regexp: stack exhaustion via a deeply nested expression
(CVE-2022-24921)

* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)

* golang: crypto/elliptic: panic caused by oversized scalar
(CVE-2022-28327)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

3. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

4. Bugs fixed (https://bugzilla.redhat.com/):

1937609 - VM cannot be restarted
1945593 - Live migration should be blocked for VMs with host devices
1968514 - [RFE] Add cancel migration action to virtctl
1993109 - CNV MacOS Client not signed
1994604 - [RFE] - Add a feature to virtctl to print out a message if virtctl is a different version than the server side
2001385 - no "name" label in virt-operator pod
2009793 - KBase to clarify nested support status is missing
2010318 - with sysprep config data as cfgmap volume and as cdrom disk a windows10 VMI fails to LiveMigrate
2025276 - No permissions when trying to clone to a different namespace (as Kubeadmin)
2025401 - [TEST ONLY]  [CNV+OCS/ODF]  Virtualization poison pill implemenation
2026357 - Migration in sequence can be reported as failed even when it succeeded
2029349 - cluster-network-addons-operator does not serve metrics through HTTPS
2030801 - CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
2030806 - CVE-2021-44717 golang: syscall: don't close fd 0 on ForkExec error
2031857 - Add annotation for URL to download the image
2033077 - KubeVirtComponentExceedsRequestedMemory Prometheus Rule is Failing to Evaluate
2035344 - kubemacpool-mac-controller-manager not ready
2036676 - NoReadyVirtController and NoReadyVirtOperator are never triggered
2039976 - Pod stuck in "Terminating" state when removing VM with kernel boot and container disks
2040766 - A crashed Windows VM cannot be restarted with virtctl or the UI
2041467 - [SSP] Support custom DataImportCron creating in custom namespaces
2042402 - LiveMigration with postcopy misbehave when failure occurs2042809 - sysprep disk requires autounattend.xml if an unattend.xml exists
2045086 - KubeVirtComponentExceedsRequestedMemory Prometheus Rule is Failing to Evaluate
2045880 - CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
2047186 - When entering to a RH supported template, it changes the project (namespace) to ?OpenShift?
2051899 - 4.11.0 containers2052094 - [rhel9-cnv] VM fails to start, virt-handler error msg: Couldn't configure ip nat rules
2052466 - Event does not include reason for inability to live migrate
2052689 - Overhead Memory consumption calculations are incorrect
2053429 - CVE-2022-23806 golang: crypto/elliptic: IsOnCurve returns true for invalid field elements
2053532 - CVE-2022-23772 golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString
2053541 - CVE-2022-23773 golang: cmd/go: misinterpretation of branch names can lead to incorrect access control
2056467 - virt-template-validator pods getting scheduled on the same node
2057157 - [4.10.0] HPP-CSI-PVC fails to bind PVC when node fqdn is long
2057310 - qemu-guest-agent does not report information due to selinux denials
2058149 - cluster-network-addons-operator deployment's MULTUS_IMAGE is pointing to brew image
2058925 - Must-gather: for vms with longer name, gather_vms_details fails to collect qemu, dump xml logs
2059121 - [CNV-4.11-rhel9] virt-handler pod CrashLoopBackOff state
2060485 - virtualMachine with duplicate interfaces name causes MACs to be rejected by Kubemacpool
2060585 - [SNO] Failed to find the virt-controller leader pod
2061208 - Cannot delete network Interface if VM has multiqueue for networking enabled.
2061723 - Prevent new DataImportCron to manage DataSource if multiple DataImportCron pointing to same DataSource
2063540 - [CNV-4.11] Authorization Failed When Cloning Source Namespace
2063792 - No DataImportCron for CentOS 7
2064034 - On an upgraded cluster NetworkAddonsConfig seems to be reconciling in a loop
2064702 - CVE-2022-27191 golang: crash in a golang.org/x/crypto/ssh server
2064857 - CVE-2022-24921 golang: regexp: stack exhaustion via a deeply nested expression
2064936 - Migration of vm from VMware reports pvc not large enough
2065014 - Feature Highlights in CNV 4.10 contains links to 4.7
2065019 - "Running VMs per template" in the new overview tab counts VMs that are not running
2066768 - [CNV-4.11-HCO] User Cannot List Resource "namespaces" in API group
2067246 - [CNV]: Unable to ssh to Virtual Machine post changing Flavor tiny to custom
2069287 - Two annotations for VM Template provider name
2069388 - [CNV-4.11] kubemacpool-mac-controller - TLS handshake error
2070366 - VM Snapshot Restore hangs indefinitely when backed by a snapshotclass
2070864 - non-privileged user cannot see catalog tiles
2071488 - "Migrate Node to Node" is confusing.
2071549 - [rhel-9] unable to create a non-root virt-launcher based VM
2071611 - Metrics documentation generators are missing metrics/recording rules
2071921 - Kubevirt RPM is not being built
2073669 - [rhel-9] VM fails to start
2073679 - [rhel-8] VM fails to start: missing virt-launcher-monitor downstream
2073982 - [CNV-4.11-RHEL9] 'virtctl' binary fails with 'rc1' with 'virtctl version' command
2074337 - VM created from registry cannot be started
2075200 - VLAN filtering cannot be configured with Intel X710
2075409 - [CNV-4.11-rhel9] hco-operator and hco-webhook pods CrashLoopBackOff
2076292 - Upgrade from 4.10.1->4.11 using nightly channel, is not completing with error "could not complete the upgrade process. KubeVirt is not with the expected version. Check KubeVirt observed version in the status field of its CR"
2076379 - must-gather: ruletables and qemu logs collected as a part of gather_vm_details scripts are zero bytes file
2076790 - Alert SSPDown is constantly in Firing state
2076908 - clicking on a template in the Running VMs per Template card leads to 404
2077688 - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode
2077689 - CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar
2078700 - Windows template boot source should be blank
2078703 - [RFE] Please hide the user defined password when customizing cloud-init
2078709 - VM conditions column have wrong key/values
2078728 - Common template rootDisk is not named correctly
2079366 - rootdisk is not able to edit
2079674 - Configuring preferred node affinity in the console results in wrong yaml and unschedulable VM
2079783 - Actions are broken in topology view
2080132 - virt-launcher logs live migration in nanoseconds if the migration is stuck
2080155 - [RFE] Provide the progress of VM migration in the source virt launcher pod
2080547 - Metrics kubevirt_hco_out_of_band_modifications_count, does not reflect correct modification count when label is added to priorityclass/kubevirt-cluster-critical in a loop
2080833 - Missing cloud init script editor in the scripts tab
2080835 - SSH key is set using cloud init script instead of new api
2081182 - VM SSH command generated by UI points at api VIP
2081202 - cloud-init for Windows VM generated with corrupted "undefined" section
2081409 - when viewing a common template details page, user need to see the message "can't edit common template" on all tabs
2081671 - SSH service created outside the UI is not discoverable
2081831 - [RFE] Improve disk hotplug UX
2082008 - LiveMigration fails due to loss of connection to destination host
2082164 - Migration progress timeout expects absolute progress
2082912 - [CNV-4.11] HCO Being Unable to Reconcile State
2083093 - VM overview tab is crashed
2083097 - ?Mount Windows drivers disk? should not show when the template is not ?windows?
2083100 - Something keeps loading in the ?node selector? modal
2083101 - ?Restore default settings? never become available while editing CPU/Memory
2083135 - VM fails to schedule with vTPM in spec
2083256 - SSP Reconcile logging improvement when CR resources are changed
2083595 - [RFE] Disable VM descheduler if the VM is not live migratable
2084102 - [e2e] Many elements are lacking proper selector like 'data-test-id' or 'data-test'
2084122 - [4.11]Clone from filesystem to block on storage api with the same size fails
2084418 - ?Invalid SSH public key format? appears when drag ssh key file to ?Authorized SSH Key? field
2084431 - User credentials for ssh is not in correct format
2084476 - The Virtual Machine Authorized SSH Key is not shown in the scripts tab.
2084532 - Console is crashed while detaching disk
2084610 - Newly added Kubevirt-plugin pod is missing resources.requests values (cpu/memory)
2085320 - Tolerations rules is not adding correctly
2085322 - Not able to stop/restart VM if the VM is staying in "Starting"
2086272 - [dark mode] Titles in Overview tab not visible enough in dark mode
2086278 - Cloud init script edit add " hostname='' " when is should not be added
2086281 - [dark mode] Helper text in Scripts tab not visible enough on dark mode
2086286 - [dark mode] The contrast of the Labels and edit labels not look good in the dark mode
2086293 - [dark mode] Titles in Parameters tab not visible enough in dark mode
2086294 - [dark mode] Can't see the number inside the donut chart in VMs per template card
2086303 - non-priv user can't create VM when namespace is not selected
2086479 - some modals use ?Save? and some modals use ?Submit?
2086486 - cluster overview getting started card include old information
2086488 - Cannot cancel vm migration if the migration pod is not schedulable in the backend
2086769 - Missing vm.kubevirt.io/template.namespace label when creating VM with the wizard
2086803 - When clonnig a template we need to update vm labels and annotaions to match new template
2086825 - VM restore PVC uses exact source PVC request size
2086849 - Create from YAML example is not runnable
2087188 - When VM is stopped - adding disk failed to show
2087189 - When VM is stopped - adding disk failed to show
2087232 - When chosing a vm or template while in all-namespace, and returning to list, namespace is changed
2087546 - "Quick Starts" is missing in Getting started card
2087547 - Activity and Status card are missing in Virtualization Overview
2087559 - template in "VMs per template" should take user to vm list page
2087566 - Remove the ?auto upload? label from template in the catalog if the auto-upload boot source not exists
2087570 - Page title should be ?VirtualMachines? and not ?Virtual Machines?
2087577 - "VMs per template" load time is a bit long
2087578 - Terminology "VM" should be "Virtual Machine" in all places
2087582 - Remove VMI and MTV from the navigation
2087583 - [RFE] Show more info about boot source in template list
2087584 - Template provider should not be mandatory
2087587 - Improve the descriptive text in the kebab menu of template
2087589 - Red icons shows in storage disk source selection without a good reason
2087590 - [REF] "Upload a new file to a PVC" should not open the form in a new tab
2087593 - "Boot method" is not a good name in overview tab
2087603 - Align details card for single VM overview with the design doc
2087616 - align the utilization card of single VM overview with the design
2087701 - [RFE] Missing a link to VMI from running VM details page
2087717 - Message when editing template boot source is wrong
2088034 - Virtualization Overview crashes when a VirtualMachine has no labels
2088355 - disk modal shows all storage classes as default
2088361 - Attached disk keeps in loading status when add disk to a power off VM by non-privileged user
2088379 - Create VM from catalog does not respect the storageclass of the template's boot source
2088407 - Missing create button in the template list
2088471 - [HPP] hostpath-provisioner-csi does not comply with restricted security context
2088472 - Golden Images import cron jobs are not getting updated on upgrade to 4.11
2088477 - [4.11.z] VMSnapshot restore fails to provision volume with size mismatch error
2088849 - "dataimportcrontemplate.kubevirt.io/enable" field does not do any validation
2089078 - ConsolePlugin kubevirt-plugin is not getting reconciled by hco
2089271 - Virtualization appears twice in sidebar
2089327 - add network modal crash when no networks available
2089376 - Virtual Machine Template without dataVolumeTemplates gets blank page
2089477 - [RFE] Allow upload source when adding VM disk
2089700 - Drive column in Disks card of Overview page has duplicated values
2089745 - When removing all disks from customize wizard app crashes
2089789 - Add windows drivers disk is missing when template is not windows
2089825 - Top consumers card on Virtualization Overview page should keep display parameters as set by user
2089836 - Card titles on single VM Overview page does not have hyperlinks to relevant pages
2089840 - Cant create snapshot if VM is without disks
2089877 - Utilization card on single VM overview - timespan menu lacks 5min option
2089932 - Top consumers card on single VM overview - View by resource dropdown menu needs an update
2089942 - Utilization card on single VM overview - trend charts at the bottom should be linked to proper metrics
2089954 - Details card on single VM overview - VNC console has grey padding
2089963 - Details card on single VM overview - Operating system info is not available
2089967 - Network Interfaces card on single VM overview - name tooltip lacks info
2089970 - Network Interfaces card on single VM overview - IP tooltip
2089972 - Disks card on single VM overview -typo
2089979 - Single VM Details - CPU|Memory edit icon misplaced
2089982 - Single VM Details - SSH modal has redundant VM name
2090035 - Alert card is missing in single VM overview
2090036 - OS should be "Operating system" and host should be "hostname" in single vm overview
2090037 - Add template link in single vm overview details card
2090038 - The update field under the version in overview should be consistent with the operator page
2090042 - Move the edit button close to the text for "boot order" and "ssh access"
2090043 - "No resource selected" in vm boot order
2090046 - Hardware devices section In the VM details and Template details should be aligned with catalog page
2090048 - "Boot mode" should be editable while VM is running
2090054 - Services ?kubernetes" and "openshift" should not be listing in vm details
2090055 - Add link to vm template in vm details page
2090056 - "Something went wrong" shows on VM "Environment" tab
2090057 - "?" icon is too big in environment and disk tab
2090059 - Failed to add configmap in environment tab due to validate error
2090064 - Miss "remote desktop" in console dropdown list for windows VM
2090066 - [RFE] Improve guest login credentials
2090068 - Make the "name" and "Source" column wider in vm disk tab
2090131 - Key's value in "add affinity rule" modal is too small
2090350 - memory leak in virt-launcher process
2091003 - SSH service is not deleted along the VM
2091058 - After VM gets deleted, the user is redirected to a page with a different namespace
2091309 - While disabling a golden image via HCO, user should not be required to enter the whole spec.
2091406 - wrong template namespace label when creating a vm with wizard
2091754 - Scheduling and scripts tab should be editable while the VM is running
2091755 - Change bottom "Save" to "Apply" on cloud-init script form
2091756 - The root disk of cloned template should be editable
2091758 - "OS" should be "Operating system" in template filter
2091760 - The provider should be empty if it's not set during cloning
2091761 - Miss "Edit labels" and "Edit annotations" in template kebab button
2091762 - Move notification above the tabs in template details page
2091764 - Clone a template should lead to the template details
2091765 - "Edit bootsource" is keeping in load in template actions dropdown
2091766 - "Are you sure you want to leave this page?" pops up when click the "Templates" link
2091853 - On Snapshot tab of single VM "Restore" button should move to the kebab actions together with the Delete
2091863 - BootSource edit modal should list affected templates
2091868 - Catalog list view has two columns named "BootSource"
2091889 - Devices should be editable for customize template
2091897 - username is missing in the generated ssh command
2091904 - VM is not started if adding "Authorized SSH Key" during vm creation
2091911 - virt-launcher pod remains as NonRoot after LiveMigrating VM from NonRoot to Root
2091940 - SSH is not enabled in vm details after restart the VM
2091945 - delete a template should lead to templates list
2091946 - Add disk modal shows wrong units
2091982 - Got a lot of "Reconciler error" in cdi-deployment log after adding custom DataImportCron to hco
2092048 - When Boot from CD is checked in customized VM creation - Disk source should be Blank
2092052 - Virtualization should be omitted in Calatog breadcrumbs
2092071 - Getting started card in Virtualization overview can not be hidden.
2092079 - Error message stays even when problematic field is dismissed
2092158 - PrometheusRule  kubevirt-hyperconverged-prometheus-rule is not getting reconciled by HCO
2092228 - Ensure Machine Type for new VMs is 8.6
2092230 - [RFE] Add indication/mark to deprecated template
2092306 - VM is stucking with WaitingForVolumeBinding if creating via "Boot from CD"
2092337 - os is empty in VM details page
2092359 - [e2e] data-test-id includes all pvc name
2092654 - [RFE] No obvious way to delete the ssh key from the VM
2092662 - No url example for rhel and windows template
2092663 - no hyperlink for URL example in disk source "url"
2092664 - no hyperlink to the cdi uploadproxy URL
2092781 - Details card should be removed for non admins.
2092783 - Top consumers' card should be removed for non admins.
2092787 - Operators links should be removed from Getting started card
2092789 - "Learn more about Operators" link should lead to the Red Hat documentation
2092951 - ?Edit BootSource? action should have more explicit information when disabled
2093282 - Remove links to 'all-namespaces/' for non-privileged user
2093691 - Creation flow drawer left padding is broken
2093713 - Required fields in creation flow should be highlighted if empty
2093715 - Optional parameters section in creation flow is missing bottom padding
2093716 - CPU|Memory modal button should say "Restore template settings?
2093772 - Add a service in environment it reminds a pending change in boot order
2093773 - Console crashed if adding a service without serial number
2093866 - Cannot create vm from the template `vm-template-example`
2093867 - OS for template 'vm-template-example' should matching the version of the image
2094202 - Cloud-init username field should have hint
2094207 - Cloud-init password field should have auto-generate option
2094208 - SSH key input is missing validation
2094217 - YAML view should reflect shanges in SSH form
2094222 - "?" icon should be placed after red asterisk in required fields
2094323 - Workload profile should be editable in template details page
2094405 - adding resource on enviornment isnt showing on disks list when vm is running
2094440 - Utilization pie charts figures are not based on current data
2094451 - PVC selection in VM creation flow does not work for non-priv user
2094453 - CD Source selection in VM creation flow is missing Upload option
2094465 - Typo in Source tooltip
2094471 - Node selector modal for non-privileged user
2094481 - Tolerations modal for non-privileged user
2094486 - Add affinity rule modal
2094491 - Affinity rules modal button
2094495 - Descheduler modal has same text in two lines
2094646 - [e2e] Elements on scheduling tab are missing proper data-test-id
2094665 - Dedicated Resources modal for non-privileged user
2094678 - Secrets and ConfigMaps can't be added to Windows VM
2094727 - Creation flow should have VM info in header row
2094807 - hardware devices dropdown has group title even with no devices in cluster
2094813 - Cloudinit password is seen in wizard
2094848 - Details card on Overview page - 'View details' link is missing
2095125 - OS is empty in the clone modal
2095129 - "undefined" appears in rootdisk line in clone modal
2095224 - affinity modal for non-privileged users2095529 - VM migration cancelation in kebab action should have shorter name
2095530 - Column sizes in VM list view
2095532 - Node column in VM list view is visible to non-privileged user
2095537 - Utilization card information should display pie charts as current data and sparkline charts as overtime
2095570 - Details tab of VM should not have Node info for non-privileged user
2095573 - Disks created as environment or scripts should have proper label
2095953 - VNC console controls layout
2095955 - VNC console tabs
2096166 - Template "vm-template-example" is binding with namespace "default"
2096206 - Inconsistent capitalization in Template Actions
2096208 - Templates in the catalog list is not sorted
2096263 - Incorrectly displaying units for Disks size or Memory field in various places
2096333 - virtualization overview, related operators title is not aligned
2096492 - Cannot create vm from a cloned template if its boot source is edited
2096502 - "Restore template settings" should be removed from template CPU editor
2096510 - VM can be created without any disk
2096511 - Template shows "no Boot Source" and label "Source available" at the same time
2096620 - in templates list, edit boot reference kebab action opens a modal with different title
2096781 - Remove boot source provider while edit boot source reference
2096801 - vnc thumbnail in virtual machine overview should be active on page load
2096845 - Windows template's scripts tab is crashed
2097328 - virtctl guestfs shouldn't required uid = 0
2097370 - missing titles for optional parameters in wizard customization page
2097465 - Count is not updating for 'prometheusrule' component when metrics kubevirt_hco_out_of_band_modifications_count executed
2097586 - AccessMode should stay on ReadWriteOnce while editing a disk with storage class HPP
2098134 - "Workload profile" column is not showing completely in template list
2098135 - Workload is not showing correct in catalog after change the template's workload
2098282 - Javascript error when changing boot source of custom template to be an uploaded file
2099443 - No "Quick create virtualmachine" button for template 'vm-template-example'
2099533 - ConsoleQuickStart for HCO CR's VM is missing
2099535 - The cdi-uploadproxy certificate url should be opened in a new tab
2099539 - No storage option for upload while editing a disk
2099566 - Cloudinit should be replaced by cloud-init in all places
2099608 - "DynamicB" shows in vm-example disk size
2099633 - Doc links needs to be updated
2099639 - Remove user line from the ssh command section
2099802 - Details card link shouldn't be hard-coded
2100054 - Windows VM with WSL2 guest fails to migrate
2100284 - Virtualization overview is crashed
2100415 - HCO is taking too much time for reconciling kubevirt-plugin deployment
2100495 - CVE-2021-38561 golang: out-of-bounds read in golang.org/x/text/language leads to DoS
2101164 - [dark mode] Number of alerts in Alerts card not visible enough in dark mode
2101192 - AccessMode should stay on ReadWriteOnce while editing a disk with storage class HPP
2101430 - Using CLOUD_USER_PASSWORD in Templates parameters breaks VM review page
2101454 - Cannot add PVC boot source to template in 'Edit Boot Source Reference' view as a non-priv user
2101485 - Cloudinit should be replaced by cloud-init in all places
2101628 - non-priv user cannot load dataSource while edit template's rootdisk
2101954 - [4.11]Smart clone and csi clone leaves tmp unbound PVC and ObjectTransfer
2102076 - Using CLOUD_USER_PASSWORD in Templates parameters breaks VM review page
2102116 - [e2e] elements on Template Scheduling tab are missing proper data-test-id
2102117 - [e2e] elements on VM Scripts tab are missing proper data-test-id
2102122 - non-priv user cannot load dataSource while edit template's rootdisk
2102124 - Cannot add PVC boot source to template in 'Edit Boot Source Reference' view as a non-priv user
2102125 - vm clone modal is displaying DV size instead of PVC size
2102127 - Cannot add NIC to VM template as non-priv user
2102129 - All templates are labeling "source available" in template list page
2102131 - The number of hardware devices is not correct in vm overview tab
2102135 - [dark mode] Number of alerts in Alerts card not visible enough in dark mode
2102143 - vm clone modal is displaying DV size instead of PVC size
2102256 - Add button moved to right
2102448 - VM disk is deleted by uncheck "Delete disks (1x)" on delete modal
2102543 - Add button moved to right
2102544 - VM disk is deleted by uncheck "Delete disks (1x)" on delete modal
2102545 - VM filter has two "Other" checkboxes which are triggered together
2104617 - Storage status report "OpenShift Data Foundation is not available" even the operator is installed
2106175 - All pages are crashed after visit Virtualization -> Overview
2106258 - All pages are crashed after visit Virtualization -> Overview
2110178 - [Docs] Text repetition in Virtual Disk Hot plug instructions
2111359 - kubevirt plugin console is crashed after creating a vm with 2 nics
2111562 - kubevirt plugin console crashed after visit vmi page
2117872 - CVE-2022-1798 kubeVirt: Arbitrary file read on the host from KubeVirt VMs

5. References:

https://access.redhat.com/security/cve/CVE-2018-25032
https://access.redhat.com/security/cve/CVE-2019-5827
https://access.redhat.com/security/cve/CVE-2019-13750
https://access.redhat.com/security/cve/CVE-2019-13751
https://access.redhat.com/security/cve/CVE-2019-17594
https://access.redhat.com/security/cve/CVE-2019-17595
https://access.redhat.com/security/cve/CVE-2019-18218
https://access.redhat.com/security/cve/CVE-2019-19603
https://access.redhat.com/security/cve/CVE-2019-20838
https://access.redhat.com/security/cve/CVE-2020-13435
https://access.redhat.com/security/cve/CVE-2020-14155
https://access.redhat.com/security/cve/CVE-2020-17541
https://access.redhat.com/security/cve/CVE-2020-24370
https://access.redhat.com/security/cve/CVE-2020-35492
https://access.redhat.com/security/cve/CVE-2021-3580
https://access.redhat.com/security/cve/CVE-2021-3634
https://access.redhat.com/security/cve/CVE-2021-3737
https://access.redhat.com/security/cve/CVE-2021-4115
https://access.redhat.com/security/cve/CVE-2021-4189
https://access.redhat.com/security/cve/CVE-2021-20231
https://access.redhat.com/security/cve/CVE-2021-20232
https://access.redhat.com/security/cve/CVE-2021-23177
https://access.redhat.com/security/cve/CVE-2021-25219
https://access.redhat.com/security/cve/CVE-2021-31535
https://access.redhat.com/security/cve/CVE-2021-31566
https://access.redhat.com/security/cve/CVE-2021-36084
https://access.redhat.com/security/cve/CVE-2021-36085
https://access.redhat.com/security/cve/CVE-2021-36086
https://access.redhat.com/security/cve/CVE-2021-36087
https://access.redhat.com/security/cve/CVE-2021-38185
https://access.redhat.com/security/cve/CVE-2021-38561
https://access.redhat.com/security/cve/CVE-2021-40528
https://access.redhat.com/security/cve/CVE-2021-43527
https://access.redhat.com/security/cve/CVE-2021-44716
https://access.redhat.com/security/cve/CVE-2021-44717
https://access.redhat.com/security/cve/CVE-2022-0778
https://access.redhat.com/security/cve/CVE-2022-1271
https://access.redhat.com/security/cve/CVE-2022-1292
https://access.redhat.com/security/cve/CVE-2022-1621
https://access.redhat.com/security/cve/CVE-2022-1629
https://access.redhat.com/security/cve/CVE-2022-1798
https://access.redhat.com/security/cve/CVE-2022-2068
https://access.redhat.com/security/cve/CVE-2022-2097
https://access.redhat.com/security/cve/CVE-2022-21698
https://access.redhat.com/security/cve/CVE-2022-22576
https://access.redhat.com/security/cve/CVE-2022-23772
https://access.redhat.com/security/cve/CVE-2022-23773
https://access.redhat.com/security/cve/CVE-2022-23806
https://access.redhat.com/security/cve/CVE-2022-24407
https://access.redhat.com/security/cve/CVE-2022-24675
https://access.redhat.com/security/cve/CVE-2022-24921
https://access.redhat.com/security/cve/CVE-2022-25313
https://access.redhat.com/security/cve/CVE-2022-25314
https://access.redhat.com/security/cve/CVE-2022-27191
https://access.redhat.com/security/cve/CVE-2022-27774
https://access.redhat.com/security/cve/CVE-2022-27776
https://access.redhat.com/security/cve/CVE-2022-27782
https://access.redhat.com/security/cve/CVE-2022-28327
https://access.redhat.com/security/cve/CVE-2022-29824
https://access.redhat.com/security/updates/classification/#important

6. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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56HM
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://listman.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2022-6526:01 Important: OpenShift Virtualization 4.11.0 Images

Red Hat OpenShift Virtualization release 4.11.0 is now available with updates to packages and images that fix several bugs and add enhancements

Summary

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains the following OpenShift Virtualization 4.11.0 images:
RHEL-8-CNV-4.11 ==============hostpath-provisioner-container-v4.11.0-21 kubevirt-tekton-tasks-operator-container-v4.11.0-29 kubevirt-template-validator-container-v4.11.0-17 bridge-marker-container-v4.11.0-26 hostpath-csi-driver-container-v4.11.0-21 cluster-network-addons-operator-container-v4.11.0-26 ovs-cni-marker-container-v4.11.0-26 virtio-win-container-v4.11.0-16 ovs-cni-plugin-container-v4.11.0-26 kubemacpool-container-v4.11.0-26 hostpath-provisioner-operator-container-v4.11.0-24 cnv-containernetworking-plugins-container-v4.11.0-26 kubevirt-ssp-operator-container-v4.11.0-54 virt-cdi-uploadserver-container-v4.11.0-59 virt-cdi-cloner-container-v4.11.0-59 virt-cdi-operator-container-v4.11.0-59 virt-cdi-importer-container-v4.11.0-59 virt-cdi-uploadproxy-container-v4.11.0-59 virt-cdi-controller-container-v4.11.0-59 virt-cdi-apiserver-container-v4.11.0-59 kubevirt-tekton-tasks-modify-vm-template-container-v4.11.0-7 kubevirt-tekton-tasks-create-vm-from-template-container-v4.11.0-7 kubevirt-tekton-tasks-copy-template-container-v4.11.0-7 checkup-framework-container-v4.11.0-67 kubevirt-tekton-tasks-cleanup-vm-container-v4.11.0-7 kubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.0-7 kubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.0-7 kubevirt-tekton-tasks-disk-virt-customize-container-v4.11.0-7 vm-network-latency-checkup-container-v4.11.0-67 kubevirt-tekton-tasks-create-datavolume-container-v4.11.0-7 hyperconverged-cluster-webhook-container-v4.11.0-95 cnv-must-gather-container-v4.11.0-62 hyperconverged-cluster-operator-container-v4.11.0-95 kubevirt-console-plugin-container-v4.11.0-83 virt-controller-container-v4.11.0-105 virt-handler-container-v4.11.0-105 virt-operator-container-v4.11.0-105 virt-launcher-container-v4.11.0-105 virt-artifacts-server-container-v4.11.0-105 virt-api-container-v4.11.0-105 libguestfs-tools-container-v4.11.0-105 hco-bundle-registry-container-v4.11.0-587
Security Fix(es):
* golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)
* kubeVirt: Arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798)
* golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)
* golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717)
* prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
* golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString (CVE-2022-23772)
* golang: cmd/go: misinterpretation of branch names can lead to incorrect access control (CVE-2022-23773)
* golang: crypto/elliptic: IsOnCurve returns true for invalid field elements (CVE-2022-23806)
* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)
* golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)
* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)
* golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Summary


Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258

References

https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/cve/CVE-2019-5827 https://access.redhat.com/security/cve/CVE-2019-13750 https://access.redhat.com/security/cve/CVE-2019-13751 https://access.redhat.com/security/cve/CVE-2019-17594 https://access.redhat.com/security/cve/CVE-2019-17595 https://access.redhat.com/security/cve/CVE-2019-18218 https://access.redhat.com/security/cve/CVE-2019-19603 https://access.redhat.com/security/cve/CVE-2019-20838 https://access.redhat.com/security/cve/CVE-2020-13435 https://access.redhat.com/security/cve/CVE-2020-14155 https://access.redhat.com/security/cve/CVE-2020-17541 https://access.redhat.com/security/cve/CVE-2020-24370 https://access.redhat.com/security/cve/CVE-2020-35492 https://access.redhat.com/security/cve/CVE-2021-3580 https://access.redhat.com/security/cve/CVE-2021-3634 https://access.redhat.com/security/cve/CVE-2021-3737 https://access.redhat.com/security/cve/CVE-2021-4115 https://access.redhat.com/security/cve/CVE-2021-4189 https://access.redhat.com/security/cve/CVE-2021-20231 https://access.redhat.com/security/cve/CVE-2021-20232 https://access.redhat.com/security/cve/CVE-2021-23177 https://access.redhat.com/security/cve/CVE-2021-25219 https://access.redhat.com/security/cve/CVE-2021-31535 https://access.redhat.com/security/cve/CVE-2021-31566 https://access.redhat.com/security/cve/CVE-2021-36084 https://access.redhat.com/security/cve/CVE-2021-36085 https://access.redhat.com/security/cve/CVE-2021-36086 https://access.redhat.com/security/cve/CVE-2021-36087 https://access.redhat.com/security/cve/CVE-2021-38185 https://access.redhat.com/security/cve/CVE-2021-38561 https://access.redhat.com/security/cve/CVE-2021-40528 https://access.redhat.com/security/cve/CVE-2021-43527 https://access.redhat.com/security/cve/CVE-2021-44716 https://access.redhat.com/security/cve/CVE-2021-44717 https://access.redhat.com/security/cve/CVE-2022-0778 https://access.redhat.com/security/cve/CVE-2022-1271 https://access.redhat.com/security/cve/CVE-2022-1292 https://access.redhat.com/security/cve/CVE-2022-1621 https://access.redhat.com/security/cve/CVE-2022-1629 https://access.redhat.com/security/cve/CVE-2022-1798 https://access.redhat.com/security/cve/CVE-2022-2068 https://access.redhat.com/security/cve/CVE-2022-2097 https://access.redhat.com/security/cve/CVE-2022-21698 https://access.redhat.com/security/cve/CVE-2022-22576 https://access.redhat.com/security/cve/CVE-2022-23772 https://access.redhat.com/security/cve/CVE-2022-23773 https://access.redhat.com/security/cve/CVE-2022-23806 https://access.redhat.com/security/cve/CVE-2022-24407 https://access.redhat.com/security/cve/CVE-2022-24675 https://access.redhat.com/security/cve/CVE-2022-24921 https://access.redhat.com/security/cve/CVE-2022-25313 https://access.redhat.com/security/cve/CVE-2022-25314 https://access.redhat.com/security/cve/CVE-2022-27191 https://access.redhat.com/security/cve/CVE-2022-27774 https://access.redhat.com/security/cve/CVE-2022-27776 https://access.redhat.com/security/cve/CVE-2022-27782 https://access.redhat.com/security/cve/CVE-2022-28327 https://access.redhat.com/security/cve/CVE-2022-29824 https://access.redhat.com/security/updates/classification/#important

Package List


Severity
Advisory ID: RHSA-2022:6526-01
Product: cnv
Advisory URL: https://access.redhat.com/errata/RHSA-2022:6526
Issued Date: : 2022-09-14
CVE Names: CVE-2018-25032 CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 CVE-2019-17594 CVE-2019-17595 CVE-2019-18218 CVE-2019-19603 CVE-2019-20838 CVE-2020-13435 CVE-2020-14155 CVE-2020-17541 CVE-2020-24370 CVE-2020-35492 CVE-2021-3580 CVE-2021-3634 CVE-2021-3737 CVE-2021-4115 CVE-2021-4189 CVE-2021-20231 CVE-2021-20232 CVE-2021-23177 CVE-2021-25219 CVE-2021-31535 CVE-2021-31566 CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 CVE-2021-38185 CVE-2021-38561 CVE-2021-40528 CVE-2021-43527 CVE-2021-44716 CVE-2021-44717 CVE-2022-0778 CVE-2022-1271 CVE-2022-1292 CVE-2022-1621 CVE-2022-1629 CVE-2022-1798 CVE-2022-2068 CVE-2022-2097 CVE-2022-21698 CVE-2022-22576 CVE-2022-23772 CVE-2022-23773 CVE-2022-23806 CVE-2022-24407 CVE-2022-24675 CVE-2022-24921 CVE-2022-25313 CVE-2022-25314 CVE-2022-27191 CVE-2022-27774 CVE-2022-27776 CVE-2022-27782 CVE-2022-28327 CVE-2022-29824

Topic

Red Hat OpenShift Virtualization release 4.11.0 is now available withupdates to packages and images that fix several bugs and add enhancements.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.


Topic


 

Relevant Releases Architectures


Bugs Fixed

1937609 - VM cannot be restarted

1945593 - Live migration should be blocked for VMs with host devices

1968514 - [RFE] Add cancel migration action to virtctl

1993109 - CNV MacOS Client not signed

1994604 - [RFE] - Add a feature to virtctl to print out a message if virtctl is a different version than the server side

2001385 - no "name" label in virt-operator pod

2009793 - KBase to clarify nested support status is missing

2010318 - with sysprep config data as cfgmap volume and as cdrom disk a windows10 VMI fails to LiveMigrate

2025276 - No permissions when trying to clone to a different namespace (as Kubeadmin)

2025401 - [TEST ONLY] [CNV+OCS/ODF] Virtualization poison pill implemenation

2026357 - Migration in sequence can be reported as failed even when it succeeded

2029349 - cluster-network-addons-operator does not serve metrics through HTTPS

2030801 - CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache

2030806 - CVE-2021-44717 golang: syscall: don't close fd 0 on ForkExec error

2031857 - Add annotation for URL to download the image

2033077 - KubeVirtComponentExceedsRequestedMemory Prometheus Rule is Failing to Evaluate

2035344 - kubemacpool-mac-controller-manager not ready

2036676 - NoReadyVirtController and NoReadyVirtOperator are never triggered

2039976 - Pod stuck in "Terminating" state when removing VM with kernel boot and container disks

2040766 - A crashed Windows VM cannot be restarted with virtctl or the UI

2041467 - [SSP] Support custom DataImportCron creating in custom namespaces

2042402 - LiveMigration with postcopy misbehave when failure occurs2042809 - sysprep disk requires autounattend.xml if an unattend.xml exists

2045086 - KubeVirtComponentExceedsRequestedMemory Prometheus Rule is Failing to Evaluate

2045880 - CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter

2047186 - When entering to a RH supported template, it changes the project (namespace) to ?OpenShift?

2051899 - 4.11.0 containers2052094 - [rhel9-cnv] VM fails to start, virt-handler error msg: Couldn't configure ip nat rules

2052466 - Event does not include reason for inability to live migrate

2052689 - Overhead Memory consumption calculations are incorrect

2053429 - CVE-2022-23806 golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

2053532 - CVE-2022-23772 golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString

2053541 - CVE-2022-23773 golang: cmd/go: misinterpretation of branch names can lead to incorrect access control

2056467 - virt-template-validator pods getting scheduled on the same node

2057157 - [4.10.0] HPP-CSI-PVC fails to bind PVC when node fqdn is long

2057310 - qemu-guest-agent does not report information due to selinux denials

2058149 - cluster-network-addons-operator deployment's MULTUS_IMAGE is pointing to brew image

2058925 - Must-gather: for vms with longer name, gather_vms_details fails to collect qemu, dump xml logs

2059121 - [CNV-4.11-rhel9] virt-handler pod CrashLoopBackOff state

2060485 - virtualMachine with duplicate interfaces name causes MACs to be rejected by Kubemacpool

2060585 - [SNO] Failed to find the virt-controller leader pod

2061208 - Cannot delete network Interface if VM has multiqueue for networking enabled.

2061723 - Prevent new DataImportCron to manage DataSource if multiple DataImportCron pointing to same DataSource

2063540 - [CNV-4.11] Authorization Failed When Cloning Source Namespace

2063792 - No DataImportCron for CentOS 7

2064034 - On an upgraded cluster NetworkAddonsConfig seems to be reconciling in a loop

2064702 - CVE-2022-27191 golang: crash in a golang.org/x/crypto/ssh server

2064857 - CVE-2022-24921 golang: regexp: stack exhaustion via a deeply nested expression

2064936 - Migration of vm from VMware reports pvc not large enough

2065014 - Feature Highlights in CNV 4.10 contains links to 4.7

2065019 - "Running VMs per template" in the new overview tab counts VMs that are not running

2066768 - [CNV-4.11-HCO] User Cannot List Resource "namespaces" in API group

2067246 - [CNV]: Unable to ssh to Virtual Machine post changing Flavor tiny to custom

2069287 - Two annotations for VM Template provider name

2069388 - [CNV-4.11] kubemacpool-mac-controller - TLS handshake error

2070366 - VM Snapshot Restore hangs indefinitely when backed by a snapshotclass

2070864 - non-privileged user cannot see catalog tiles

2071488 - "Migrate Node to Node" is confusing.

2071549 - [rhel-9] unable to create a non-root virt-launcher based VM

2071611 - Metrics documentation generators are missing metrics/recording rules

2071921 - Kubevirt RPM is not being built

2073669 - [rhel-9] VM fails to start

2073679 - [rhel-8] VM fails to start: missing virt-launcher-monitor downstream

2073982 - [CNV-4.11-RHEL9] 'virtctl' binary fails with 'rc1' with 'virtctl version' command

2074337 - VM created from registry cannot be started

2075200 - VLAN filtering cannot be configured with Intel X710

2075409 - [CNV-4.11-rhel9] hco-operator and hco-webhook pods CrashLoopBackOff

2076292 - Upgrade from 4.10.1->4.11 using nightly channel, is not completing with error "could not complete the upgrade process. KubeVirt is not with the expected version. Check KubeVirt observed version in the status field of its CR"

2076379 - must-gather: ruletables and qemu logs collected as a part of gather_vm_details scripts are zero bytes file

2076790 - Alert SSPDown is constantly in Firing state

2076908 - clicking on a template in the Running VMs per Template card leads to 404

2077688 - CVE-2022-24675 golang: encoding/pem: fix stack overflow in Decode

2077689 - CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar

2078700 - Windows template boot source should be blank

2078703 - [RFE] Please hide the user defined password when customizing cloud-init

2078709 - VM conditions column have wrong key/values

2078728 - Common template rootDisk is not named correctly

2079366 - rootdisk is not able to edit

2079674 - Configuring preferred node affinity in the console results in wrong yaml and unschedulable VM

2079783 - Actions are broken in topology view

2080132 - virt-launcher logs live migration in nanoseconds if the migration is stuck

2080155 - [RFE] Provide the progress of VM migration in the source virt launcher pod

2080547 - Metrics kubevirt_hco_out_of_band_modifications_count, does not reflect correct modification count when label is added to priorityclass/kubevirt-cluster-critical in a loop

2080833 - Missing cloud init script editor in the scripts tab

2080835 - SSH key is set using cloud init script instead of new api

2081182 - VM SSH command generated by UI points at api VIP

2081202 - cloud-init for Windows VM generated with corrupted "undefined" section

2081409 - when viewing a common template details page, user need to see the message "can't edit common template" on all tabs

2081671 - SSH service created outside the UI is not discoverable

2081831 - [RFE] Improve disk hotplug UX

2082008 - LiveMigration fails due to loss of connection to destination host

2082164 - Migration progress timeout expects absolute progress

2082912 - [CNV-4.11] HCO Being Unable to Reconcile State

2083093 - VM overview tab is crashed

2083097 - ?Mount Windows drivers disk? should not show when the template is not ?windows?

2083100 - Something keeps loading in the ?node selector? modal

2083101 - ?Restore default settings? never become available while editing CPU/Memory

2083135 - VM fails to schedule with vTPM in spec

2083256 - SSP Reconcile logging improvement when CR resources are changed

2083595 - [RFE] Disable VM descheduler if the VM is not live migratable

2084102 - [e2e] Many elements are lacking proper selector like 'data-test-id' or 'data-test'

2084122 - [4.11]Clone from filesystem to block on storage api with the same size fails

2084418 - ?Invalid SSH public key format? appears when drag ssh key file to ?Authorized SSH Key? field

2084431 - User credentials for ssh is not in correct format

2084476 - The Virtual Machine Authorized SSH Key is not shown in the scripts tab.

2084532 - Console is crashed while detaching disk

2084610 - Newly added Kubevirt-plugin pod is missing resources.requests values (cpu/memory)

2085320 - Tolerations rules is not adding correctly

2085322 - Not able to stop/restart VM if the VM is staying in "Starting"

2086272 - [dark mode] Titles in Overview tab not visible enough in dark mode

2086278 - Cloud init script edit add " hostname='' " when is should not be added

2086281 - [dark mode] Helper text in Scripts tab not visible enough on dark mode

2086286 - [dark mode] The contrast of the Labels and edit labels not look good in the dark mode

2086293 - [dark mode] Titles in Parameters tab not visible enough in dark mode

2086294 - [dark mode] Can't see the number inside the donut chart in VMs per template card

2086303 - non-priv user can't create VM when namespace is not selected

2086479 - some modals use ?Save? and some modals use ?Submit?

2086486 - cluster overview getting started card include old information

2086488 - Cannot cancel vm migration if the migration pod is not schedulable in the backend

2086769 - Missing vm.kubevirt.io/template.namespace label when creating VM with the wizard

2086803 - When clonnig a template we need to update vm labels and annotaions to match new template

2086825 - VM restore PVC uses exact source PVC request size

2086849 - Create from YAML example is not runnable

2087188 - When VM is stopped - adding disk failed to show

2087189 - When VM is stopped - adding disk failed to show

2087232 - When chosing a vm or template while in all-namespace, and returning to list, namespace is changed

2087546 - "Quick Starts" is missing in Getting started card

2087547 - Activity and Status card are missing in Virtualization Overview

2087559 - template in "VMs per template" should take user to vm list page

2087566 - Remove the ?auto upload? label from template in the catalog if the auto-upload boot source not exists

2087570 - Page title should be ?VirtualMachines? and not ?Virtual Machines?

2087577 - "VMs per template" load time is a bit long

2087578 - Terminology "VM" should be "Virtual Machine" in all places

2087582 - Remove VMI and MTV from the navigation

2087583 - [RFE] Show more info about boot source in template list

2087584 - Template provider should not be mandatory

2087587 - Improve the descriptive text in the kebab menu of template

2087589 - Red icons shows in storage disk source selection without a good reason

2087590 - [REF] "Upload a new file to a PVC" should not open the form in a new tab

2087593 - "Boot method" is not a good name in overview tab

2087603 - Align details card for single VM overview with the design doc

2087616 - align the utilization card of single VM overview with the design

2087701 - [RFE] Missing a link to VMI from running VM details page

2087717 - Message when editing template boot source is wrong

2088034 - Virtualization Overview crashes when a VirtualMachine has no labels

2088355 - disk modal shows all storage classes as default

2088361 - Attached disk keeps in loading status when add disk to a power off VM by non-privileged user

2088379 - Create VM from catalog does not respect the storageclass of the template's boot source

2088407 - Missing create button in the template list

2088471 - [HPP] hostpath-provisioner-csi does not comply with restricted security context

2088472 - Golden Images import cron jobs are not getting updated on upgrade to 4.11

2088477 - [4.11.z] VMSnapshot restore fails to provision volume with size mismatch error

2088849 - "dataimportcrontemplate.kubevirt.io/enable" field does not do any validation

2089078 - ConsolePlugin kubevirt-plugin is not getting reconciled by hco

2089271 - Virtualization appears twice in sidebar

2089327 - add network modal crash when no networks available

2089376 - Virtual Machine Template without dataVolumeTemplates gets blank page

2089477 - [RFE] Allow upload source when adding VM disk

2089700 - Drive column in Disks card of Overview page has duplicated values

2089745 - When removing all disks from customize wizard app crashes

2089789 - Add windows drivers disk is missing when template is not windows

2089825 - Top consumers card on Virtualization Overview page should keep display parameters as set by user

2089836 - Card titles on single VM Overview page does not have hyperlinks to relevant pages

2089840 - Cant create snapshot if VM is without disks

2089877 - Utilization card on single VM overview - timespan menu lacks 5min option

2089932 - Top consumers card on single VM overview - View by resource dropdown menu needs an update

2089942 - Utilization card on single VM overview - trend charts at the bottom should be linked to proper metrics

2089954 - Details card on single VM overview - VNC console has grey padding

2089963 - Details card on single VM overview - Operating system info is not available

2089967 - Network Interfaces card on single VM overview - name tooltip lacks info

2089970 - Network Interfaces card on single VM overview - IP tooltip

2089972 - Disks card on single VM overview -typo

2089979 - Single VM Details - CPU|Memory edit icon misplaced

2089982 - Single VM Details - SSH modal has redundant VM name

2090035 - Alert card is missing in single VM overview

2090036 - OS should be "Operating system" and host should be "hostname" in single vm overview

2090037 - Add template link in single vm overview details card

2090038 - The update field under the version in overview should be consistent with the operator page

2090042 - Move the edit button close to the text for "boot order" and "ssh access"

2090043 - "No resource selected" in vm boot order

2090046 - Hardware devices section In the VM details and Template details should be aligned with catalog page

2090048 - "Boot mode" should be editable while VM is running

2090054 - Services ?kubernetes" and "openshift" should not be listing in vm details

2090055 - Add link to vm template in vm details page

2090056 - "Something went wrong" shows on VM "Environment" tab

2090057 - "?" icon is too big in environment and disk tab

2090059 - Failed to add configmap in environment tab due to validate error

2090064 - Miss "remote desktop" in console dropdown list for windows VM

2090066 - [RFE] Improve guest login credentials

2090068 - Make the "name" and "Source" column wider in vm disk tab

2090131 - Key's value in "add affinity rule" modal is too small

2090350 - memory leak in virt-launcher process

2091003 - SSH service is not deleted along the VM

2091058 - After VM gets deleted, the user is redirected to a page with a different namespace

2091309 - While disabling a golden image via HCO, user should not be required to enter the whole spec.

2091406 - wrong template namespace label when creating a vm with wizard

2091754 - Scheduling and scripts tab should be editable while the VM is running

2091755 - Change bottom "Save" to "Apply" on cloud-init script form

2091756 - The root disk of cloned template should be editable

2091758 - "OS" should be "Operating system" in template filter

2091760 - The provider should be empty if it's not set during cloning

2091761 - Miss "Edit labels" and "Edit annotations" in template kebab button

2091762 - Move notification above the tabs in template details page

2091764 - Clone a template should lead to the template details

2091765 - "Edit bootsource" is keeping in load in template actions dropdown

2091766 - "Are you sure you want to leave this page?" pops up when click the "Templates" link

2091853 - On Snapshot tab of single VM "Restore" button should move to the kebab actions together with the Delete

2091863 - BootSource edit modal should list affected templates

2091868 - Catalog list view has two columns named "BootSource"

2091889 - Devices should be editable for customize template

2091897 - username is missing in the generated ssh command

2091904 - VM is not started if adding "Authorized SSH Key" during vm creation

2091911 - virt-launcher pod remains as NonRoot after LiveMigrating VM from NonRoot to Root

2091940 - SSH is not enabled in vm details after restart the VM

2091945 - delete a template should lead to templates list

2091946 - Add disk modal shows wrong units

2091982 - Got a lot of "Reconciler error" in cdi-deployment log after adding custom DataImportCron to hco

2092048 - When Boot from CD is checked in customized VM creation - Disk source should be Blank

2092052 - Virtualization should be omitted in Calatog breadcrumbs

2092071 - Getting started card in Virtualization overview can not be hidden.

2092079 - Error message stays even when problematic field is dismissed

2092158 - PrometheusRule kubevirt-hyperconverged-prometheus-rule is not getting reconciled by HCO

2092228 - Ensure Machine Type for new VMs is 8.6

2092230 - [RFE] Add indication/mark to deprecated template

2092306 - VM is stucking with WaitingForVolumeBinding if creating via "Boot from CD"

2092337 - os is empty in VM details page

2092359 - [e2e] data-test-id includes all pvc name

2092654 - [RFE] No obvious way to delete the ssh key from the VM

2092662 - No url example for rhel and windows template

2092663 - no hyperlink for URL example in disk source "url"

2092664 - no hyperlink to the cdi uploadproxy URL

2092781 - Details card should be removed for non admins.

2092783 - Top consumers' card should be removed for non admins.

2092787 - Operators links should be removed from Getting started card

2092789 - "Learn more about Operators" link should lead to the Red Hat documentation

2092951 - ?Edit BootSource? action should have more explicit information when disabled

2093282 - Remove links to 'all-namespaces/' for non-privileged user

2093691 - Creation flow drawer left padding is broken

2093713 - Required fields in creation flow should be highlighted if empty

2093715 - Optional parameters section in creation flow is missing bottom padding

2093716 - CPU|Memory modal button should say "Restore template settings?

2093772 - Add a service in environment it reminds a pending change in boot order

2093773 - Console crashed if adding a service without serial number

2093866 - Cannot create vm from the template `vm-template-example`

2093867 - OS for template 'vm-template-example' should matching the version of the image

2094202 - Cloud-init username field should have hint

2094207 - Cloud-init password field should have auto-generate option

2094208 - SSH key input is missing validation

2094217 - YAML view should reflect shanges in SSH form

2094222 - "?" icon should be placed after red asterisk in required fields

2094323 - Workload profile should be editable in template details page

2094405 - adding resource on enviornment isnt showing on disks list when vm is running

2094440 - Utilization pie charts figures are not based on current data

2094451 - PVC selection in VM creation flow does not work for non-priv user

2094453 - CD Source selection in VM creation flow is missing Upload option

2094465 - Typo in Source tooltip

2094471 - Node selector modal for non-privileged user

2094481 - Tolerations modal for non-privileged user

2094486 - Add affinity rule modal

2094491 - Affinity rules modal button

2094495 - Descheduler modal has same text in two lines

2094646 - [e2e] Elements on scheduling tab are missing proper data-test-id

2094665 - Dedicated Resources modal for non-privileged user

2094678 - Secrets and ConfigMaps can't be added to Windows VM

2094727 - Creation flow should have VM info in header row

2094807 - hardware devices dropdown has group title even with no devices in cluster

2094813 - Cloudinit password is seen in wizard

2094848 - Details card on Overview page - 'View details' link is missing

2095125 - OS is empty in the clone modal

2095129 - "undefined" appears in rootdisk line in clone modal

2095224 - affinity modal for non-privileged users2095529 - VM migration cancelation in kebab action should have shorter name

2095530 - Column sizes in VM list view

2095532 - Node column in VM list view is visible to non-privileged user

2095537 - Utilization card information should display pie charts as current data and sparkline charts as overtime

2095570 - Details tab of VM should not have Node info for non-privileged user

2095573 - Disks created as environment or scripts should have proper label

2095953 - VNC console controls layout

2095955 - VNC console tabs

2096166 - Template "vm-template-example" is binding with namespace "default"

2096206 - Inconsistent capitalization in Template Actions

2096208 - Templates in the catalog list is not sorted

2096263 - Incorrectly displaying units for Disks size or Memory field in various places

2096333 - virtualization overview, related operators title is not aligned

2096492 - Cannot create vm from a cloned template if its boot source is edited

2096502 - "Restore template settings" should be removed from template CPU editor

2096510 - VM can be created without any disk

2096511 - Template shows "no Boot Source" and label "Source available" at the same time

2096620 - in templates list, edit boot reference kebab action opens a modal with different title

2096781 - Remove boot source provider while edit boot source reference

2096801 - vnc thumbnail in virtual machine overview should be active on page load

2096845 - Windows template's scripts tab is crashed

2097328 - virtctl guestfs shouldn't required uid = 0

2097370 - missing titles for optional parameters in wizard customization page

2097465 - Count is not updating for 'prometheusrule' component when metrics kubevirt_hco_out_of_band_modifications_count executed

2097586 - AccessMode should stay on ReadWriteOnce while editing a disk with storage class HPP

2098134 - "Workload profile" column is not showing completely in template list

2098135 - Workload is not showing correct in catalog after change the template's workload

2098282 - Javascript error when changing boot source of custom template to be an uploaded file

2099443 - No "Quick create virtualmachine" button for template 'vm-template-example'

2099533 - ConsoleQuickStart for HCO CR's VM is missing

2099535 - The cdi-uploadproxy certificate url should be opened in a new tab

2099539 - No storage option for upload while editing a disk

2099566 - Cloudinit should be replaced by cloud-init in all places

2099608 - "DynamicB" shows in vm-example disk size

2099633 - Doc links needs to be updated

2099639 - Remove user line from the ssh command section

2099802 - Details card link shouldn't be hard-coded

2100054 - Windows VM with WSL2 guest fails to migrate

2100284 - Virtualization overview is crashed

2100415 - HCO is taking too much time for reconciling kubevirt-plugin deployment

2100495 - CVE-2021-38561 golang: out-of-bounds read in golang.org/x/text/language leads to DoS

2101164 - [dark mode] Number of alerts in Alerts card not visible enough in dark mode

2101192 - AccessMode should stay on ReadWriteOnce while editing a disk with storage class HPP

2101430 - Using CLOUD_USER_PASSWORD in Templates parameters breaks VM review page

2101454 - Cannot add PVC boot source to template in 'Edit Boot Source Reference' view as a non-priv user

2101485 - Cloudinit should be replaced by cloud-init in all places

2101628 - non-priv user cannot load dataSource while edit template's rootdisk

2101954 - [4.11]Smart clone and csi clone leaves tmp unbound PVC and ObjectTransfer

2102076 - Using CLOUD_USER_PASSWORD in Templates parameters breaks VM review page

2102116 - [e2e] elements on Template Scheduling tab are missing proper data-test-id

2102117 - [e2e] elements on VM Scripts tab are missing proper data-test-id

2102122 - non-priv user cannot load dataSource while edit template's rootdisk

2102124 - Cannot add PVC boot source to template in 'Edit Boot Source Reference' view as a non-priv user

2102125 - vm clone modal is displaying DV size instead of PVC size

2102127 - Cannot add NIC to VM template as non-priv user

2102129 - All templates are labeling "source available" in template list page

2102131 - The number of hardware devices is not correct in vm overview tab

2102135 - [dark mode] Number of alerts in Alerts card not visible enough in dark mode

2102143 - vm clone modal is displaying DV size instead of PVC size

2102256 - Add button moved to right

2102448 - VM disk is deleted by uncheck "Delete disks (1x)" on delete modal

2102543 - Add button moved to right

2102544 - VM disk is deleted by uncheck "Delete disks (1x)" on delete modal

2102545 - VM filter has two "Other" checkboxes which are triggered together

2104617 - Storage status report "OpenShift Data Foundation is not available" even the operator is installed

2106175 - All pages are crashed after visit Virtualization -> Overview

2106258 - All pages are crashed after visit Virtualization -> Overview

2110178 - [Docs] Text repetition in Virtual Disk Hot plug instructions

2111359 - kubevirt plugin console is crashed after creating a vm with 2 nics

2111562 - kubevirt plugin console crashed after visit vmi page

2117872 - CVE-2022-1798 kubeVirt: Arbitrary file read on the host from KubeVirt VMs


Related News