RHBA-2025:14763 - Bug Fix Advisory

Topic

OpenShift Operators are available for the control plane of Red Hat OpenStack Services on OpenShift (RHOSO) 18.0.11.

Description

Red Hat OpenStack Services on OpenShift is a hybrid cloud solution for deploying and managing virtualized and containerized applications in a
scalable infrastructure with a Red Hat OpenShift Container Platform (RHOCP) control plane.

Red Hat OpenShift Operators automate the creation, configuration, and management of instances of Kubernetes-native applications. The Operators in this release automate the creation, configuration, and management of OpenStack services in a RHOSO deployment.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update as a new RHOSO 18.0 deployment, see
“Deploying Red Hat OpenStack Services on OpenShift” at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift/index

For details on how to apply this update to an existing RHOSO 18.0 deployment, see "Updating your environment to the latest maintenance release" at https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/updating_your_environment_to_the_latest_maintenance_release/index

Affected Products

• Red Hat OpenStack Services on OpenShift Podifed Operators 1.0 x86_64

Fixes

• OSPRH-17624 - Swift EDPM role fails due to missing permissions
• OSPRH-17676 - cinder operator and manila operator add /etc/localtime then it causes timezone mismatch between OpenStack Services
• OSPRH-18291 - glance-operator can't set Region to config for using per-tenant quota
• OSPRH-18408 - galera endpoint failover might rely on stale endpoints data during OCP worker outage
• OSPRH-18448 - horizon 18.0: dashboard exposes sensitive S3 credentials in Glance Image Properties
• OSPRH-5808 - DB doesn't accept IPv4 and IPv6 connections simultaneously
• OSPRH-17456 - OpenStack operator initialization can panic when non-namespaced operator "refs" data is processed
• OSPRH-18744 - RHOSO Operator CrashLoopBackOff panic: interface conversion: interface {} is nil, not string

CVEs

• CVE-2024-52533
• CVE-2025-3576
• CVE-2025-4373
• CVE-2025-6965
• CVE-2025-22871
• CVE-2025-32414
• CVE-2025-32415
• CVE-2025-47273

References

(none)