RHBA-2024:7440 - Bug Fix Advisory

Topic

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.15.7 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.

Description

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3-compatible API.

Bug fixes:

• Previously, when the label on the nodes was empty, the persistent volume claim (PVC) mount failed. With this fix, if the node label is empty, it is not considered for `crush_location` mount option. As a result, PVC mounts successfully. (BZ#2303181)
• Previously, the Requested capacity and Utilization cards displayed data only for the default storage classes created by the OpenShift Container Storage operator as part of the storage system creation. These cards did not include any custom storage classes that were created later. This was due to the refactoring of the prometheus to support multiple storage clusters.

With this fix, the queries are updated and the cards show the report capacity for both default and custom created storage classes. (BZ#2290863)

• With this enhancement, while creating object bucket claim (OBC), the `NSFSAccontConfig` provided by the users is supported. (BZ#2271779)
• Previously, the noobaa-operator logs exposed the AWS secret as plain text, which caused a potential risk that anyone with logs could access the buckets. With this fix, noobaa-operator logs no longer expose AWS secrets. (BZ#2302697)

All users of Red Hat OpenShift Data Foundation are advised to upgrade to these updated images, which provide these bug fixes.

Solution

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Data Foundation 4 for RHEL 9 x86_64
• Red Hat OpenShift Data Foundation for IBM Power, little endian 4 for RHEL 9 ppc64le
• Red Hat OpenShift Data Foundation for IBM Z and LinuxONE 4 for RHEL 9 s390x
• Red Hat OpenShift Data Foundation for RHEL 9 ARM 4 aarch64

Fixes

• BZ - 2277094 - Collect all resources in default mode
• BZ - 2290863 - Capacity & Utilization cards do not incorporate custom StorageClasses (Block & file dashboard)
• BZ - 2302697 - [GSS] noobaa-operator logs expose aws secret
• BZ - 2303181 - after upgrade from 4.15.15 to 4.15.18 image registry pods are stuck at ?container creating?
• BZ - 2314150 - Upgrade ceph version to 6.1z8 in ODF-4.15.7

CVEs

• CVE-2024-6119
• CVE-2024-6923
• CVE-2024-34397
• CVE-2024-37370
• CVE-2024-37371
• CVE-2024-37891
• CVE-2024-38428
• CVE-2024-39331
• CVE-2024-45490
• CVE-2024-45491
• CVE-2024-45492

References

• https://access.redhat.com/security/cve/CVE-2024-41818
• https://access.redhat.com/security/cve/CVE-2024-29041
• https://access.redhat.com/security/cve/CVE-2024-6104
• https://access.redhat.com/security/cve/CVE-2024-8421
• https://access.redhat.com/security/cve/CVE-2024-28863