LoginSign Up
← Back to all sparks
K

KubeVirt

INFRA · APIS
Velocity5.0

Virtual machine management add-on that runs VMs alongside Kubernetes containers

kubevirt.io ↗

KubeVirt 1.10 hits rc.1 with incremental VM backup in beta and a port-forward CVE fixed.

kubernetesvirtualizationvm-backupsecuritydra
◆Current state
KubeVirt runs a long pre-release cycle per minor version, and 1.10 is now at rc.1 (12 November) with 1,761 changes from 104 contributors since 1.9.1. The cycle centres on VM data protection: incremental backup and the backup API move to beta, offline incremental backup and an External snapshot mode arrive. rc.1 also lists a fix for an SSRF flaw (CVE-2026-13318) that let a malicious guest agent redirect virtctl port-forward and ssh traffic.
◆Where it's heading
1.10 is turning KubeVirt's backup story from experimental into something operators can plan around, while DRA-based networking and CPU allocation move it closer to how Kubernetes now hands out hardware. Lower overhead is a side thread: virt-launcher-monitor was rewritten in C to use about 2 MiB. Based on the 1.9 cycle, which went rc.0 to rc.2 in four weeks, the final release is likely a few weeks out.
◆Prediction
Expect at least one more 1.10 release candidate, then the final, with incremental backup as the headline beta feature.

◆Recent moves

  1. 1d ago

    KubeVirt 1.10 rc.1 fixes a port-forward SSRF and VM start bugs

    The second 1.10 candidate adds a handful of fixes on top of rc.0: VMs with GPU, SR-IOV or PCI devices failing to start when plugins exist, a virt-handler panic on kubelet restarts, and migrations stuck during rolling upgrades. It also carries the CVE-2026-13318 SSRF fix, which matters to anyone exposing virtctl port-forward or ssh.

    View source ↗
  2. 11d ago

    KubeVirt 1.10 RC brings incremental backup to beta

    The first 1.10 candidate is large (1,740 changes from 102 contributors) and centres on VM data protection: incremental backup moves to beta with a v1beta1 API, offline incremental backup arrives, and External-mode VM snapshots land with guest-write recovery after a launcher crash. It also promotes utility volumes to beta and makes memory dumps depend on them.

    View source ↗
  3. 1mo ago

    KubeVirt 1.10 beta opens with 1,345 changes

    The first 1.10 beta, with 1,345 changes from 94 contributors since 1.9.1; the notable changes start with Istio sidecar termination moving out of virt-launcher. A large cycle entering stabilisation.

    View source ↗
  4. 2mo ago

    v1.10.0-alpha.0

    v1.10.0-alpha.0 opens the next development cycle with 824 changes from 72 contributors across 3133 files. The net negative diff (more deletions than insertions) suggests architectural cleanup alongside new work — a common pattern in KubeVirt alphas where technical debt is addressed before new feature scope is locked.

    View source ↗
  5. 3mo ago

    v1.9.0-rc.2

    Second v1.9 release candidate with 1653 changes from 108 contributors. The step up from RC1 (26 additional changes, one more contributor) confirms the team is in active stabilization with continued fixes arriving from a broad contributor pool rather than a narrow maintainer group.

    View source ↗
  6. 4mo ago

    v1.9.0-rc.1

    First v1.9 release candidate: 1627 changes, 107 contributors. RC1 typically locks major feature scope; further changes between RC1 and RC2 were minor stabilization. Change count indicates v1.9 was a large release by any measure.

    View source ↗