RHBA-2024:8154 - Bug Fix Advisory

Topic

OpenShift Operators are available for the data plane of Red Hat OpenStack Services on OpenShift (RHOSO) 18.0.2.

Description

Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a
scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane.

Red Hat OpenShift Operators automate the creation, configuration, and
management of instances of Kubernetes-native applications. The Operators in
this release automate the creation, configuration, and management of
OpenStack services in a RHOSO deployment.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update as a new RHOSO 18.0 deployment, see “Deploying Red Hat OpenStack Services on OpenShift” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index

For details on how to apply this update to an existing RHOSO 18.0 deployment, see "Updating your environment to the latest maintenance release" at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index 7. Verification:
MD5 sum Package Name

• ------------------------------------------------------------------------

d5666a1c654a31dadc267dc83460881a ansible-config_template-2.0.1-17.1.20230621083924.7951228.el9ost.src.rpm
4df695993f34b268f5f854c1d32913e1 ansible-config_template-2.0.1-17.1.20230621083924.7951228.el9ost.noarch.rpm

These packages are GPG signed by Red Hat, Inc. for security. Our key is available at:
https://access.redhat.com/security/team/key/

You can verify each package with the following command:

rpm --checksig -v filename

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command:

md5sum filename

Note that you need RPM >= 3.0 to check GnuPG keys.

8. References:
https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index

Affected Products

• Red Hat OpenStack Services on OpenShift External Data Plane Management 1.0 x86_64

Fixes

• OSPRH-9451 - When environment gets deployed with only TLS for public endpoints, the CA bundle is not configured on the dataplane nodes

CVEs

• CVE-2024-6119
• CVE-2024-45490
• CVE-2024-45491
• CVE-2024-45492

References

• https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index
• https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index