RHBA-2024:6777 - Bug Fix Advisory

Topic

OpenShift Operators are available for the data plane of Red Hat OpenStack Services on OpenShift (RHOSO) 18.0.1.

Description

Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a
scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane.

Red Hat OpenShift Operators automate the creation, configuration, and
management of instances of Kubernetes-native applications. The Operators in
this release automate the creation, configuration, and management of
OpenStack services in a RHOSO deployment.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update as a new RHOSO 18.0 deployment, see “Deploying Red Hat OpenStack Services on OpenShift” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index

For details on how to apply this update to an existing RHOSO 18.0 deployment, see "Updating your environment to the latest maintenance release" at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index 7. Verification:
MD5 sum Package Name

• ------------------------------------------------------------------------

These packages are GPG signed by Red Hat, Inc. for security. Our key is available at:
https://access.redhat.com/security/team/key/

You can verify each package with the following command:

rpm --checksig -v filename

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command:

md5sum filename

Note that you need RPM >= 3.0 to check GnuPG keys.

8. References:
https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index https://access.redhat.com/security/cve/CVE-2024-6923 https://access.redhat.com/security/cve/CVE-2024-34397 https://access.redhat.com/security/cve/CVE-2024-37370 https://access.redhat.com/security/cve/CVE-2024-37371 https://access.redhat.com/security/cve/CVE-2024-37891

Affected Products

• Red Hat OpenStack Services on OpenShift External Data Plane Management 1.0 x86_64

Fixes

• OSPRH-10156 - Respin EDPM containers for 18.0.1

CVEs

• CVE-2024-5569
• CVE-2024-6840
• CVE-2024-6923
• CVE-2024-7246
• CVE-2024-32879
• CVE-2024-33663
• CVE-2024-34397
• CVE-2024-37370
• CVE-2024-37371
• CVE-2024-37891
• CVE-2024-38875
• CVE-2024-39329
• CVE-2024-39330
• CVE-2024-39614
• CVE-2024-41989
• CVE-2024-41990
• CVE-2024-41991
• CVE-2024-42005

References

• https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index
• https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index