RHBA-2024:6735 - Bug Fix Advisory

Topic

OpenShift API for Data Protection (OADP) 1.4.1 is now available.

Description

OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• OpenShift API for Data Protection 1 for RHEL 9 x86_64
• OpenShift API for Data Protection for ARM 64 1 for RHEL 9 aarch64
• OpenShift API for Data Protection for IBM Power, little endian 1 for RHEL 9 ppc64le
• OpenShift API for Data Protection for IBM Z and LinuxONE 1 for RHEL 9 s390x

Fixes

• OADP-3106 - Datadownload fails for empty PVC with cephfs storageclass
• OADP-3960 - OADP fails when its namespace name is longer than 37 characters
• OADP-4231 - Backup w/ no pod causes: fail to patch dynamic PV, err: context deadline exceeded
• OADP-4448 - schedule backup - velero memory leak
• OADP-3227 - Velero didn't retry on failed Restore CR status update, causing the CR to remain stuck in "InProgress"
• OADP-4076 - Add client QPS config to DPA
• OADP-4172 - Allow user to override image pull policy via the dpa
• OADP-4224 - PodVolumeBackup has incorrect message
• OADP-4344 - Expose PVPatchMaximumDuration timeout for customer configuration err: fail to patch dynamic PV, err: context deadline exceeded
• OADP-4379 - node-agent pod killed, due to larger consumption of ephemeral-storage.
• OADP-4459 - Performance Degradation using Kopia on Restore for Large Files Compared to OADP 1.3.x
• OADP-4623 - OpenShift on IBMCLoud setup for OADP
• OADP-4640 - Carry Downstream: Override kopia default hash, encryption, splitter algo via env var
• OADP-2871 - Backup is marked as PartiallyFailed when volumeSnapshotContent CR has an error
• OADP-3140 - Post Restore Hooks might start running before Datadownload op has release the related PV
• OADP-4692 - Buildconfig results in error during restore on different cluster when backed up from 4.15

CVEs

• CVE-2024-2398
• CVE-2024-6345
• CVE-2024-6923
• CVE-2024-29510
• CVE-2024-33869
• CVE-2024-33870
• CVE-2024-34397
• CVE-2024-35235
• CVE-2024-37370
• CVE-2024-37371
• CVE-2024-40897
• CVE-2024-42472

References

(none)