RHBA-2024:0630 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.12.11 on Red Hat Enterprise Linux 8 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3-compatible API.

Bug fixes:

• Previously, object buckets were unable to provide the details to the object bucket claims (OBCs) that refer the object buckets because the object buckets that were collected through the ocs-metrics-exporter never had the OBC references in it. With this fix, the matching OBC details are added to the object buckets thus populating OBC label details for the query. (BZ#2239766)
• Previously, the Multicloud Object Gateway command for `obc regenerate` did not have the flag `app-namespace`, which is available for other object bucket claim (OBC) operations such as creation and deletion of OBC.

With this fix, the `app-namespace` flag is added to the `obc generate` command. As a result, OBC regenerates S3 credentials in all namespaces. (BZ#2246877)

All users of Red Hat OpenShift Data Foundation are advised to upgrade to
these updated images, which provide these bug fixes.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 8 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 8 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 8 s390x

Fixes

• BZ - 2233025 - ocs_advanced_usage metric is 0 even when storageclass/PV encryption is enabled
• BZ - 2250884 - [Backport to 4.12] CSI pods and customer workloads both have 'priority=0' and race for resources

CVEs

• CVE-2007-4559
• CVE-2020-12762
• CVE-2022-3094
• CVE-2022-48337
• CVE-2022-48339
• CVE-2022-48468
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-4016
• CVE-2023-4641
• CVE-2023-5678
• CVE-2023-22745
• CVE-2023-23931
• CVE-2023-31486
• CVE-2023-35789

References

(none)