RHBA-2024:3964 - Bug Fix Advisory

Topic

Red Hat OpenShift sandboxed containers 1.6.0 is now available.

Description

OpenShift sandboxed containers support for OpenShift Container Platform
provides users with built-in support for running Kata containers as an
additional, optional runtime.

This advisory contains an update for OpenShift sandboxed containers with
bug fixes and container upgrades.

Space precludes documenting all of the updates to OpenShift sandboxed
containers in this advisory. See the Release Notes documentation,
which will be updated shortly for this release, for details about these
changes:

https://access.redhat.com/documentation/en-us/openshift_sandboxed_containers/1.6/html/release_notes/

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 4.14 for RHEL 9 x86_64

Fixes

• KATA-2894 - CVP failure: skipRanges are not as expect
• KATA-2947 - Work towards merging feature gate implementation to OSC devel
• KATA-2958 - osc-podvm-image-creation fails is image gallery is not unique
• KATA-2962 - deleting kataconfig on Azure should delete podvm image
• KATA-2693 - update golang builder image to include fix for rapid reset bug 1.6
• KATA-2982 - OSC 1.6.0 with peer pod with GPU enabled AMI doesn't see Nvidia drivers
• KATA-3108 - 1.6.0 podvm builder container has many CVEs
• KATA-3112 - PodVM image build failure causing controller-manager to crashloop on libvirt provider
• KATA-2633 - customer should be notified about AMI creation job installation stage
• KATA-2790 - Controller Manager is OOM killed on Single Node Cluster
• KATA-2964 - unable to update AZURE_INSTANCE_SIZES without restarting peerpod controller and webhook

CVEs

• CVE-2022-48554
• CVE-2023-2975
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-5678
• CVE-2023-6004
• CVE-2023-6129
• CVE-2023-6237
• CVE-2023-6597
• CVE-2023-6918
• CVE-2023-7008
• CVE-2024-0450
• CVE-2024-0727
• CVE-2024-1441
• CVE-2024-2494
• CVE-2024-2961
• CVE-2024-22365
• CVE-2024-25062
• CVE-2024-26458
• CVE-2024-26461
• CVE-2024-28182
• CVE-2024-28834
• CVE-2024-28835
• CVE-2024-33599
• CVE-2024-33600
• CVE-2024-33601
• CVE-2024-33602

References

(none)