Skip to content

v1.8.2

Choose a tag to compare

View all tags
@Vicente-Cheng Vicente-Cheng released this 06 Aug 15:59
v1.8.2
5320dfa

Harvester v1.8.2 Release Notes

This release introduces several features, enhancements, and bug fixes that improve system quality and the overall user experience. The documentation is available at https://docs.harvesterhci.io/v1.8.

The Harvester team appreciates your contributions and looks forward to receiving feedback regarding this release.

Downloads

AMD64

Full ISO

💿 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-amd64.iso

📁 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-vmlinuz-amd64

📁 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-initrd-amd64

📁 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-rootfs-amd64.squashfs

✅ https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-amd64.sha512

📝 https://releases.rancher.com/harvester/v1.8.2/version.yaml

Net Install ISO

💿 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-amd64-net-install.iso

📝 https://docs.harvesterhci.io/v1.8/install/net-install/

ARM64

💿 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-arm64.iso

📁 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-vmlinuz-arm64

📁 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-initrd-arm64

📁 https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-rootfs-arm64.squashfs

✅ https://releases.rancher.com/harvester/v1.8.2/harvester-v1.8.2-arm64.sha512

📝 https://releases.rancher.com/harvester/v1.8.2/version-arm64.yaml

Security Fixes

This release addresses security vulnerabilities in the following underlying components:

  • Operating system (SUSE Linux Micro): The BaseOS image was updated with the latest SUSE security patches for the Linux kernel, resolving several use-after-free vulnerabilities that could allow privilege escalation (#11209). For more information, see CVE-2026-53359, CVE-2026-43499, and CVE-2026-46242.

  • etcd (RKE2): RKE2 was updated to include a patched etcd version that resolves a denial-of-service vulnerability in the etcd TLS listener (GHSA-6vch-q96h-7gc3). This vulnerability could exhaust server memory and render the control plane or cluster unavailable.

  • virt-handler (KubeVirt): The virt-handler service now strictly validates virtual machine console socket file targets to prevent improper symlink resolution. This prevents authenticated users with namespace edit permissions from replacing console sockets with symlinks to host container runtime sockets (such as CRI-O), which could allow attackers to hijack privileged host connections and gain full node or cluster control. For more information, see CVE-2026-7374.

Installation

Harvester can be installed using the ISO image, a bootable USB drive, and PXE boot. For more information, see the Installation section of the documentation.

Upgrade

Harvester only allows upgrades from supported versions. For more information about upgrade paths and procedures, see Upgrading Harvester.

Important

When upgrading from v1.7 to v1.8, you may encounter an operating system image corruption issue if all of the following conditions are met:

  • Harvester v1.4.1 or earlier was originally installed.
  • A separate data disk is used.
  • The cluster has been continually upgraded in place.

For more information, see issue #10687.

Enhancements

  • [backport v1.8] [ENHANCEMENT] Ensure the Kubevirt volume operation call works with v1.8.0 #11180
  • [TASK] Bump BaseOS Image for v1.8.2 #11209
  • [TASK] Component updates for Harvester v1.8.2 #11065

Bug Fixes

  • [backport v1.8] [BUG] ipxe boot of Harvester v1.8.x onwards fails on some broadcom nics #11268
  • [backport v1.8] [BUG] Failed image cannot be deleted due to finalizer lock when a successful upload exists #11218
  • [backport v1.8] restoring a VM backup to a different cluster is not working as described or intended #11173
  • [backport v1.8] [BUG] The v171 to v180 upgrade is blocked by CDI ISO image downloading #11149
  • [backport v1.8] [BUG] harvester-webhook SA token expiration with RKE2 CIS profile enabled. #11131
  • [backport v1.8] [BUG] /v1/harvester/kubeconfig rejects external Rancher global admins #11152

Known Issues

  • [BUG] v1.7.x → v1.8.0 OS-swap leaves two p11-kit files all-NUL in /usr/share on ~1/3 of nodes; breaks every TLS user on that host (containerd, Longhorn engine-image, kubelet) #10687
  • [BUG] After upgraded to three Nodes Harvester with witness role to v1.8.0-rc6, vm failed to migrate with error "Kubevirt not ready" #10447
  • [BUG] Failed to migrate VM after eject the windows image from CDROM device #10221
  • [BUG] Fail to enable rancher-logging after negative upgrade cases #10220

Component Versions

Component Version
CDI v1.64.0
Kube-OVN v1.15.4
KubeVirt v1.7.4
Longhorn v1.11.2
Embedded Rancher v2.14.3
RKE2 v1.35.7+rke2r1
SL Micro 6.2

Contributors

Thank you to all the contributors that made this release possible.

@asettle
@bk201
@brandboat
@forbesguthrie
@ibrokethecloud
@innobead
@jbrockmeyer
@jillian-maroket
@lanfon72
@rebeccazzzz
@TachunLin
@Vicente-Cheng
@WebberHuang1118
@wheatdog

Contributors

innobead, Vicente-Cheng, and 12 other contributors
Assets 8
Loading