RHBA-2024:6397 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.15.6 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3 compatible API.

Bug fixes:

• Previously, as part of the Postgres upgrade, noobaa-operator configured a new init-container to handle the upgrade and when there was no existing init container, the operator crashed. This was because, in OpenShift Data Foundation 4.15, the Postgres upgrade flow assumed that the noobaa-db-pg-0 has an init container. This is a wrong assumption for systems installed in version OpenShift Data Foundation 4.18 and earlier versions.

With this fix, during reconciliation of noobaa-db, the case where there is no init container was addressed. As a result, Postgres upgraded starts without crashing. (BZ#2281839)

• Previously, the Multicloud Object Gateway bucket lifecycle policy did not delete all objects.

With this fix, lifecycle will continue deleting the matching objects. (BZ#2291127)

• Previously, after the OpenShift Data Foundation upgrade from version 4.14 to 4.15, the backingstore was stuck with "Connecting" status.

With this fix, the location of the upgrade_bucket_policy script is corrected. (BZ#2303416)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 9 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 9 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 9 s390x
• Red Hat OpenShift Data Foundation for RHEL 9 ARM 4 aarch64

Fixes

• BZ - 2281619 - Fix vulnerability of HTTP/2 endpoint to read arbitrary amounts of header data
• BZ - 2281839 - [GSS]noobaa-opreator panics on upgrading ODF 4.14 to 4.15
• BZ - 2291324 - [4.15 backport] Standalone Noobaa cannot change tolerations on Noobaa pods
• BZ - 2294192 - CVE-2024-37890 [Clone to 4.15] CVE-2024-37890 mcg-core-container: nodejs-ws: denial of service when handling a request with many HTTP headers [openshift-data-foundation-4]
• BZ - 2294409 - consume ibm-storage-odf-operator.v1.5.0 instead of ibm-storage-odf-operator.v1.4.1
• BZ - 2297100 - [QA Only] Qualify RHCS-7.1z1 with ODF-4.15.6 in the External Mode
• BZ - 2303416 - [Backport to 4.15.z] Backingstore Stuck "Connecting" post ODF v4.15 Upgrade - INVALID_SCHEMA_REPLY SERVER system_api#/methods/read_system
• BZ - 2303680 - Upgrade ceph version to RHCEPH-6.1z7 at ODF-4.15.6
• BZ - 2303698 - [Tracker for https://bugzilla.redhat.com/show_bug.cgi?id=2303151] [GSS] ODF 4.14 Ceph MGR crashing after installation ImportError: Module not found

CVEs

• CVE-2023-45290
• CVE-2024-1737
• CVE-2024-1975
• CVE-2024-2398
• CVE-2024-4032
• CVE-2024-4076
• CVE-2024-6345
• CVE-2024-6409
• CVE-2024-24790
• CVE-2024-24806

References

(none)