RHBA-2022:8877 - Bug Fix Advisory

Topic

Red Hat OpenShift Data Foundation 4.11.4 Bug Fix Update

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multicloud data management service with an S3 compatible API.

Bug fixes:

• Previously, listing of objects took a longer time due to unnecessary sorting which caused the scanning of entries in the DB. With this fix, unnecessary sorting is removed to make the listing faster. (BZ#2141555)
• Previously, the backup and restore operation of Multicloud Object Gateway database (NooBaa DB) caused assertion errors on the duplicate keys. With this fix, updating the DB is protected to avoid race conditions and the errors that it caused. (BZ#2142337)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 8 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 8 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 8 s390x

Fixes

• BZ - 2027681 - Utilization values are misreported and isn't matching
• BZ - 2131168 - [Backport to 4.11][GSS][noobaa]Fix Tolerations setting for NooBaa in standalone mode
• BZ - 2142767 - [ODF-4.11] ocs-operator image does not contains the prometheus rules
• BZ - 2150055 - Include at ODF 4.11 container images (18) the RHEL8 CVE fix on "krb5"

CVEs

• CVE-2016-3709
• CVE-2020-0256
• CVE-2021-0308
• CVE-2021-4048
• CVE-2022-1304
• CVE-2022-22624
• CVE-2022-22628
• CVE-2022-22629
• CVE-2022-22662
• CVE-2022-26700
• CVE-2022-26709
• CVE-2022-26710
• CVE-2022-26716
• CVE-2022-26717
• CVE-2022-26719
• CVE-2022-30293
• CVE-2022-37434
• CVE-2022-42898

References

(none)