RHBA-2019:3260 - Bug Fix Advisory

Topic

An updated rhgs-gluster-block-prov-container image that fixes several bugs
is now available in the Red Hat Container Registry.

Description

rhgs-gluster-block-prov-container is the external provisioner for glusterblock volumes. Along with gluster-block, it aims to make block interface backed persistent volume creation and maintenance as simple as possible. gluster-block provisioner can provision block devices and export them as iSCSI LUNs across multiple nodes and uses iSCSI protocol for data transfer as SCSI block/commands.

This advisory fixes the following bugs:

• Previously, storageclasses did not differentiate between multiple glusterblock external provisioners in an OCP environment as the provisioner names were all identical - “gluster.org/glusterblock’. With this fix, the provisioner names can be modified by setting the environment variable "PROVISIONER_NAME" in the deploymentConfig file for glusterblock. (BZ#1703239)
• Earlier, some PVC requests stayed in PENDING state for a long duration because of an issue in the controller library used by the glusterblock provisioner. With the release, this issue has been fixed. (BZ#1607520)
• Previously, the block volume provisioner repeatedly requested that Heketi delete a block volume even if that block volume was no longer present in the Heketi database. Now, with this update, the provisioner only makes one request to Heketi to delete a volume if Heketi responds indicating the volume does not exist. (BZ#1668978)

All users of the rhgs-gluster-block-prov-container image are advised to pull this updated image from the Red Hat Container Registry.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64

Fixes

• BZ - 1607520 - While creating 100 block PVCs in loops of 10 , 7(84th to 90th) PVCs stayed in PENDING state for 20 mins
• BZ - 1668978 - Block Provisioner repeatedly requests that Heketi delete volumes that no longer exist
• BZ - 1703239 - storage classes can't differentiate between glusterblock external provisioners in different projects
• BZ - 1731381 - Respin rhgs-gluster-block-prov-container for OCS 3.11.4

CVEs

• CVE-2016-10739
• CVE-2018-0495
• CVE-2018-0734
• CVE-2018-1122
• CVE-2018-12404
• CVE-2018-12641
• CVE-2018-12697
• CVE-2018-14647
• CVE-2018-15686
• CVE-2018-16062
• CVE-2018-16402
• CVE-2018-16403
• CVE-2018-16842
• CVE-2018-16866
• CVE-2018-16888
• CVE-2018-18310
• CVE-2018-18520
• CVE-2018-18521
• CVE-2018-1000876
• CVE-2019-1559
• CVE-2019-3858
• CVE-2019-3861
• CVE-2019-5010
• CVE-2019-7149
• CVE-2019-7150
• CVE-2019-7664
• CVE-2019-7665
• CVE-2019-9740
• CVE-2019-9947
• CVE-2019-9948

References

(none)