RHBA-2022:8511 - Bug Fix Advisory

Topic

Updated images that fix several bugs and enhancements are now available for Red Hat OpenShift Data Foundation 4.10.8 on Red Hat Enterprise Linux 8 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multicloud data management service with an S3 compatible API.

Enhancement:

• With this update, you can add settings to rotate the logs file according to the `periodicity` and maximum log size. In the storageCluster Custom Resource (CR), you can add the LogCollector attribute inside the spec which contains fields such as `enable`, `maxLogSize`, and `periodicity`. The `enable` field helps to enable or disable the log collector. The `maxLogSize` helps to rotate the log after the assigned size and the minimum value is 500M. The `periodicity` field helps to set the time interval at which it will rotate and the valid input values are `daily`, `hourly`, `weekly`, and `monthly`. If both the `maxLogSize` and `periodicity` are set, whichever occurs first is given more priority. (BZ#2120268)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 8 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 8 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 8 s390x

Fixes

• BZ - 2130917 - [4.10.z] [UI] Data Foundation dashboard crashes with 404 error due to cache issues when the OCP is upgraded
• BZ - 2134601 - Include at ODF 4.10 container image (1) the RHEL8 CVE fix on "bind"
• BZ - 2135843 - Include at ODF 4.10 container images (7) the RHEL8 CVE fix on "expat"
• BZ - 2140174 - Include at ODF 4.10 container images (16) the RHEL8 CVE fix on "libksba"

CVEs

• CVE-2020-35525
• CVE-2020-35527
• CVE-2022-2509
• CVE-2022-3515
• CVE-2022-37434
• CVE-2022-38177
• CVE-2022-38178
• CVE-2022-40674

References

(none)