This advisory contains the following OpenShift Virtualization 4.10.2 images:

RHEL-8-CNV-4.10

virt-artifacts-server-container-v4.10.2-1
kubevirt-template-validator-container-v4.10.2-1
virtio-win-container-v4.10.2-1
node-maintenance-operator-container-v4.10.2-1
hostpath-provisioner-operator-container-v4.10.2-1
virt-handler-container-v4.10.2-1
libguestfs-tools-container-v4.10.2-1
hostpath-csi-driver-container-v4.10.2-1
virt-operator-container-v4.10.2-1
virt-launcher-container-v4.10.2-1
hostpath-provisioner-container-v4.10.2-1
virt-api-container-v4.10.2-1
virt-controller-container-v4.10.2-1
cnv-must-gather-container-v4.10.2-2
kubernetes-nmstate-handler-container-v4.10.2-3
bridge-marker-container-v4.10.2-3
virt-cdi-uploadproxy-container-v4.10.2-3
virt-cdi-uploadserver-container-v4.10.2-3
ovs-cni-marker-container-v4.10.2-3
virt-cdi-operator-container-v4.10.2-3
ovs-cni-plugin-container-v4.10.2-3
kubemacpool-container-v4.10.2-3
virt-cdi-controller-container-v4.10.2-3
kubevirt-ssp-operator-container-v4.10.2-4
cnv-containernetworking-plugins-container-v4.10.2-3
cluster-network-addons-operator-container-v4.10.2-3
virt-cdi-apiserver-container-v4.10.2-3
hyperconverged-cluster-operator-container-v4.10.2-2
hyperconverged-cluster-webhook-container-v4.10.2-2
virt-cdi-cloner-container-v4.10.2-3
virt-cdi-importer-container-v4.10.2-3
hco-bundle-registry-container-v4.10.2-10

Security Fix(es):

• prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.