RHBA-2023:7696 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.14.1 on Red Hat Enterprise Linux 9.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Container Platform. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multicloud data management service with an S3 compatible API.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 9 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 9 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 9 s390x
• Red Hat OpenShift Data Foundation for RHEL 9 ARM 4 aarch64

Fixes

• BZ - 2248449 - Fusion HCI integration changes for OCS operator [4.14.z backport]
• BZ - 2248450 - Fusion HCI integration changes for OCS client operator [backport 4.14]
• BZ - 2248824 - [4.14 Backport][RDR] [Hub recovery] After hub recovery, MCO didn't recreate the VolumeReplicationClass
• BZ - 2248826 - [4.14 Backport][RDR] [Hub recovery] A workload which was in failedover state before hub recovery goes to cleaning up on passive hub
• BZ - 2248833 - [ODF 4.14] Revert The ocs-osd-removal-job should have unique names for each Job
• BZ - 2248850 - [Tracker][29079] rook-ceph-exporter pod restarts multiple times on a fresh installed HCI cluster
• BZ - 2248857 - Fusion HCI integration changes for odf must-gather [4.14.z backport]
• BZ - 2249510 - Include at ODF 4.14 container images (17) the RHEL9 CVE fix on "curl"
• BZ - 2249511 - Include at ODF 4.14 container images (17) the RHEL9 CVE fix on "nghttp2"
• BZ - 2249600 - [4.14 backport] [Tracker][29013] Backup failing to transfer data: snpashot PVC in pending state
• BZ - 2251205 - [4.14 clone] [RDR] [Hub recovery] Sync for all cephfs workloads stopped post hub recovery
• BZ - 2252116 - [4.14 clone][RDR] [Hub recovery] Failover of rbd workloads didn't proceed after drpc reporting WaitForStorageMaintenanceActivation

CVEs

• CVE-2007-4559
• CVE-2020-12762
• CVE-2021-3468
• CVE-2021-3502
• CVE-2021-3826
• CVE-2021-43618
• CVE-2022-48468
• CVE-2023-1981
• CVE-2023-3961
• CVE-2023-4016
• CVE-2023-4091
• CVE-2023-4641
• CVE-2023-22745
• CVE-2023-23931
• CVE-2023-29491
• CVE-2023-29499
• CVE-2023-31486
• CVE-2023-32611
• CVE-2023-32665
• CVE-2023-35789
• CVE-2023-36054
• CVE-2023-38545
• CVE-2023-38546
• CVE-2023-39975
• CVE-2023-42669
• CVE-2023-44487

References

(none)