RHBA-2024:3861 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.14.8 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3-compatible API.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 9 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 9 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 9 s390x
• Red Hat OpenShift Data Foundation for RHEL 9 ARM 4 aarch64

Fixes

• BZ - 2270405 - [Backport into 4.14] noobaa-core: move node-gyp to devDependencies to avoid shipping it
• BZ - 2274675 - CSI Pods going into OOM during volume group restore
• BZ - 2276825 - [4.14.z clone] Expose the upgrade setting for a longer timeout waiting for healthy OSDs before continuing
• BZ - 2278642 - [4.14.z clone] ocs-operator should not be annotating all openshift-* namespaces
• BZ - 2280202 - [4.14.z clone] Rook deletes ceph csi deployments and daemonsets even if it isn't the owner

CVEs

• CVE-2021-41043
• CVE-2022-48554
• CVE-2023-2975
• CVE-2023-3446
• CVE-2023-3758
• CVE-2023-3817
• CVE-2023-4408
• CVE-2023-5517
• CVE-2023-5678
• CVE-2023-5679
• CVE-2023-6129
• CVE-2023-6237
• CVE-2023-6516
• CVE-2023-7008
• CVE-2023-38469
• CVE-2023-38470
• CVE-2023-38471
• CVE-2023-38472
• CVE-2023-38473
• CVE-2023-45288
• CVE-2023-47038
• CVE-2023-50387
• CVE-2023-50868
• CVE-2024-0727
• CVE-2024-1394
• CVE-2024-2961
• CVE-2024-22195
• CVE-2024-22365
• CVE-2024-25062
• CVE-2024-28182
• CVE-2024-28834
• CVE-2024-28835
• CVE-2024-33599
• CVE-2024-33600
• CVE-2024-33601
• CVE-2024-33602

References

(none)