RHBA-2020:4142 - Bug Fix Advisory

Topic

Updated container images that fix various bugs is now available in the Red Hat Container Registry for Red Hat OpenShift Container Storage 3.11.z Async Update.

Description

The OpenShift Container Storage solution provides persistent storage service for OpenShift Containers and OpenShift Infrastructure services.

This advisory fixes the following bugs:

• Previously, failure to write to an arbiter brick because of no free space caused data corruption of the file being written to. With this update, an arbiter brick that has no free space, the writes are failed with an ENOSPC error and the file is not modified.(BZ#1850053)
• Previously, the lsof package was not included in the rhgs-server container image. Heketi requires the lsof command to collect debug information on unmounted bricks but was unable to do so because of a missing command in the container image. With this update, the lsof package is included in the rhgs-server container image so Heketi can collect the list of applications that prevent a brick from unmounting. (BZ#1850363)

All users of OpenShift Container Storage 3.11 container images are advised to pull these updated images from the Red Hat Container Registry.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64

Fixes

• BZ - 1850363 - Include lsof in server container images
• BZ - 1850655 - Respin the rhgs-server-container container for 3.11.5 async
• BZ - 1850657 - Respin the rhgs-volmanager-container container for 3.11.5 async
• BZ - 1850659 - Respin the rhgs-gluster-block-prov-container container for 3.11.5 async
• BZ - 1857178 - [OCS 3.11.5 Async] unsigned gluster rpms with the latest build of rhgs-server-container

CVEs

• CVE-2018-20843
• CVE-2019-3820
• CVE-2019-5094
• CVE-2019-5188
• CVE-2019-5482
• CVE-2019-9924
• CVE-2019-12450
• CVE-2019-12749
• CVE-2019-14822
• CVE-2019-14866
• CVE-2019-15903
• CVE-2019-16935
• CVE-2019-17498
• CVE-2019-19126
• CVE-2019-19956
• CVE-2019-20386
• CVE-2019-20388
• CVE-2020-7595
• CVE-2020-10762
• CVE-2020-10763
• CVE-2020-12243

References

(none)