RHBA-2022:7400 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.12.0 is now available with
updates to packages and images that fix several bugs and add enhancements.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.12.0. See the following advisory for the container images for
this release:

https://access.redhat.com/errata/RHSA-2022:7399

All OpenShift Container Platform 4.12 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift Console
or the CLI oc command. Instructions for upgrading a cluster are available
at
https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

Solution

For OpenShift Container Platform 4.12 see the following documentation, which
will be updated shortly for this release, for important instructions on how
to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html

Details on how to access this content are available at
https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

Affected Products

• Red Hat OpenShift Container Platform 4.12 for RHEL 9 x86_64
• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.12 for RHEL 9 ppc64le
• Red Hat OpenShift Container Platform for Power 4.12 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 9 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 9 aarch64
• Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 8 aarch64

Fixes

• BZ - 2091873 - [Local Storage Operator] Deleted node and added the node back localVolume/LocalVolumeSet CR provisioned PV couldn't become available again after pvc deleted
• BZ - 2097488 - [sriov] operator Generic SriovNetworkNodePolicy Meta Plugin Configuration Should be able to configure a metaplugin
• BZ - 2101200 - [sriov] operator Custom SriovNetworkNodePolicy Resource Injector SR-IOV Operator Config, disable Webhook resource injector
• BZ - 2101525 - [4.12] add Intel E810 NIC model (1591) support in SR-IOV Operator
• BZ - 2104436 - [dpu-network-operator] Updating images to be consistent with ART
• BZ - 2105130 - DPDK/SRIOV pod configuration without privilege
• BZ - 2110005 - OCP 4.11: Error when deploying NFD via yaml files - "no matches for kind "NodeFeatureDiscovery" in version "nfd.openshift.io/v1"
• BZ - 2112319 - bond-cni: Backport "mac duplicates"
• OCPBUGS-2126 - sriov config daemon pod crash
• OCPBUGS-3369 - OvS HWOL fails to pass traffic between pods
• OCPBUGS-2218 - Enable IPv6 unsolicited neighbour advertisements by default on SR-IOV Operator
• OCPBUGS-1605 - Event Pull Status Notification GET Method not working as per o-Ran spec
• OCPBUGS-2109 - Sr-Iov Intel config daemon is not writing rules for NetworkManager
• OCPBUGS-582 - sriov cannot be upgraded to 4.12 from 4.11
• OCPBUGS-1637 - incorrect version number used in yaml
• OCPBUGS-521 - sriov operator doesn't support golang 1.18
• OCPBUGS-3511 - PTP Event (AMQ) : Failed to get GetCurrentState for Events Clock Class Change
• OCPBUGS-3625 - End2End tests fail due to lack of Pod Security Admission
• OCPBUGS-3661 - Update image version to 4.12 in cluster-nfd-operator github repo config/manifests/bases/nfd.clusterserviceversion.yaml
• OCPBUGS-3677 - NFD cluster-nfd-operator make image support for arm64 deployment from github repo needs Dockerfile updates
• OCPBUGS-3688 - NFD does not properly detect AMD processors
• OCPBUGS-3746 - Replace deprecated go get in Makefile
• OCPBUGS-3748 - Changing kustomize version
• OCPBUGS-3789 - NFD operator default namespace openshift-nfd needs specific pod security labels added for OCP 4.12
• OCPBUGS-3817 - Update skipper configuration in NFD operator
• OCPBUGS-3839 - Adding local ARM compilation/build configuration
• OCPBUGS-3866 - Improve sriov nic selector in cnf-tests
• OCPBUGS-3905 - Fix bundle for release-4.12
• OCPBUGS-4148 - [4.12] fix operator naming convention
• OCPBUGS-4296 - Fix Makefile for ART usage
• OCPBUGS-4320 - add reviewers/approves to NFD operator
• OCPBUGS-4349 - fix operator naming convention
• OCPBUGS-4463 - fix incorrect format of old skipRange
• OCPBUGS-4585 - SR-IOV VFs may get reseted after being allocated by other pods
• OCPBUGS-3350 - Race condition between PTP events and AMQ router startup
• OCPBUGS-4140 - [4.12] Sriov-network-operator does not detect changes to Machine Config (when updating the machine config)
• OCPBUGS-4255 - AMQ resource are not freedup up after multiple GetCurrentState Call
• OCPBUGS-4842 - Add missing nic mode switch script to 4.12
• OCPBUGS-4602 - SR-IOV | Connectivity doesn't work with iPv6+static mac on top of i40e driver
• OCPBUGS-5302 - Current State api call for os-clock-state creates nil pointer
• OCPBUGS-5210 - BF2 is not converted to nic mode after applied converting machineConfig

CVEs

• CVE-2021-4235
• CVE-2022-2880
• CVE-2022-2995
• CVE-2022-3162
• CVE-2022-3172
• CVE-2022-3259
• CVE-2022-3466
• CVE-2022-27664
• CVE-2022-30631
• CVE-2022-32148
• CVE-2022-32189
• CVE-2022-41715
• CVE-2022-42010
• CVE-2022-42011
• CVE-2022-42012
• CVE-2022-42898

References

(none)