RHBA-2019:3869 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.2.5 is now available with
updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container
Platform 4.2.5. See the following advisory for the RPM packages for this
release:

https://access.redhat.com/errata/RHBA-2019:3868

Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html

You may download the oc tool and use it to inspect release image metadata
as follows:

$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.2.5

The image digest is sha256:37c3ebd6fcdd20820a575a3639891cf9feed65a7553129ac6f0d1ef57fc6ad1e

All OpenShift Container Platform 4.2 users are advised to upgrade to these
updated packages and images.

Solution

See the following documentation, which will be updated shortly for release 4.2.5, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.2/release_notes/ocp-4-2-release-notes.html

Affected Products

• Red Hat OpenShift Container Platform 4.2 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.2 for RHEL 7 x86_64

Fixes

• BZ - 1755131 - Package description links to incorrect "about reporting" documentation URL
• BZ - 1755980 - "Add Capacity" workflow for OCS breaks Portworx Operator
• BZ - 1757159 - Metering operator using old container metric labels for container cpu/memory usage metrics in 4.2
• BZ - 1757807 - [GCP] [flake] [Feature:Prometheus][Conformance] Prometheus when installed on the cluster should provide ingress metrics [Suite:openshift/conformance/parallel/minimal]
• BZ - 1760790 - [simpleMacvlan] CNO will crashes when simpleMacvlan is configured without ipamConfig
• BZ - 1762006 - Gracefully handle the disabled default opsrc during the upgrade
• BZ - 1763308 - Metering tables are stored in textformat instead of ORC
• BZ - 1763841 - Subscriptions are not getting processed / take very long to get processed
• BZ - 1764720 - NetworkManager & kubelet startup race condition
• BZ - 1765179 - [4.2] Many router e2e tests are flaky due to a buggy wait script
• BZ - 1766066 - [proxy] report-progress.sh on bootstrap need external api server to create bootstrap configmap resource
• BZ - 1766365 - TestNamespaceCondition integration test fails
• BZ - 1767961 - Pipeline doesn't start because of trigger type
• BZ - 1768098 - OCP 4.2.0 to 4.2.2 upgrade.yml with rhel7 workers failing
• BZ - 1768658 - MS Edge does not support scrollTo used on details pages
• BZ - 1768785 - [4.2] Authentication attempts are failing with Request Header Authentication Provider
• BZ - 1769302 - should add download deployment resource limits
• BZ - 1769832 - Unnecessarily high API server usage of the Node Tuning Operator's operand (openshift-tuned)

CVEs

• CVE-2016-10739
• CVE-2017-14503
• CVE-2018-0734
• CVE-2018-0735
• CVE-2018-12207
• CVE-2018-16890
• CVE-2018-20483
• CVE-2018-20534
• CVE-2018-20685
• CVE-2018-1000877
• CVE-2018-1000878
• CVE-2019-0154
• CVE-2019-1543
• CVE-2019-3817
• CVE-2019-3822
• CVE-2019-3823
• CVE-2019-3829
• CVE-2019-3836
• CVE-2019-5010
• CVE-2019-6109
• CVE-2019-6111
• CVE-2019-6706
• CVE-2019-7146
• CVE-2019-7149
• CVE-2019-7150
• CVE-2019-7664
• CVE-2019-7665
• CVE-2019-9740
• CVE-2019-9893
• CVE-2019-9947
• CVE-2019-9948
• CVE-2019-11135
• CVE-2019-11236
• CVE-2019-11324
• CVE-2019-12450
• CVE-2019-12749
• CVE-2019-15718
• CVE-2019-1000019
• CVE-2019-1000020

References

(none)