RHBA-2024:10992 - Bug Fix Advisory

Topic

Logging for Red Hat OpenShift - 6.1.1

Description

Logging for Red Hat OpenShift - 6.1.1

Solution

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:

https://docs.openshift.com/container-platform/4.17/release_notes/ocp-4-17-release-notes.html

For Red Hat OpenShift Logging 6.1, see the following instructions to apply this update:

https://docs.openshift.com/container-platform/4.17/observability/logging/logging-6.1/log6x-upgrading-to-6.html

Affected Products

• Logging Subsystem for Red Hat OpenShift for ARM 64 6 aarch64
• Logging Subsystem for Red Hat OpenShift 6 x86_64
• Logging Subsystem for Red Hat OpenShift for IBM Power, little endian 6 ppc64le
• Logging Subsystem for Red Hat OpenShift for IBM Z and LinuxONE 6 s390x

Fixes

• LOG-6379 - [release-6.1] Collector is ignoring audit logs larger than max_line_bytes
• LOG-6383 - [release-6.1] When enabling inputs receivers in CLF, the tls secrets can't be created making collector pods can't be ready.
• LOG-6405 - Infinite validation messages for pipelines
• LOG-6407 - [Logging 6.1.z] Alerting rules for log-collection contains summary and message annotation instead of summary and description annotation
• LOG-6420 - [release-6.1] Operator - Add CCO support for GCP WIF for openshift-related tenant modes.
• LOG-6449 - [release-6.1] Named audit input causes nil pointer dereference exception
• LOG-6469 - [release-6.1] Fix tech-preview annotation for lokistack otlp validation
• LOG-6484 - [release-6.1] Collector pods does not collect oauth-server audit logs
• LOG-6498 - cluster-logging-operator's must-gather sometimes fails to collect LokiStack resource
• LOG-6533 - [release-6.1] Collector pods don't mount `/var/log/oauth-apiserver/` directory correctly

CVEs

• CVE-2019-12900
• CVE-2024-2511
• CVE-2024-3596
• CVE-2024-4603
• CVE-2024-4741
• CVE-2024-5535
• CVE-2024-10963
• CVE-2024-50602

References

(none)