RHBA-2025:15293 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.19.11 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.19.11. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2025:15291 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/

Solution

For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/ You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows:
(For x86_64 architecture) The image digest is sha256:d28dff1fd2bbbf7e923d24da21c921c53b61089690fbbe9d4b03c847487c2b5f
(For s390x architecture) The image digest is sha256:ece34ff97127d2fb4f314ca4865cb3bb35b41ca5ce8626a68e6218d87c1be71f
(For ppc64le architecture) The image digest is sha256:9033180d667f31843dd72392af840dd3d60507f935fabc5edd51bd278fe88412
(For aarch64 architecture) The image digest is sha256:f03929c5ff9b67b1bbdc736a5c86fabddd5ea9d8204451d17f346efe957aa346
All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.

Affected Products

• Red Hat OpenShift Container Platform

Fixes

• OCPBUGS-43352 - Assisted installer cluster installation fails with IP collision validation, due to a Porxy ARP request.
• OCPBUGS-50571 - CSP Violations are reported to telemetry too frequently
• OCPBUGS-52169 - Wrong workload partitioning resource accounting can render up to 2 CPUs unusable on MNO worker nodes
• OCPBUGS-56614 - Unable to remove legacy pullsecret tokens after removing registry
• OCPBUGS-59633 - E2E test to verify Guranteed pod is running after kubelet restart
• OCPBUGS-59760 - oc mirror command produces no output when executed on RHEL 8 with /tmp mounted as noexec in /etc/fstab
• OCPBUGS-59802 - [4.19] improve scaling strategy error message
• OCPBUGS-59805 - Support router PublishStrategy on IBM Cloud
• OCPBUGS-59871 - Understand and eliminate noisy logs for MCN
• OCPBUGS-60121 - uneven distribution of kube api traffic
• OCPBUGS-60147 - Ignition Server token secret payload too long - over 1048576 bytes
• OCPBUGS-60152 - Hypershift Workloads missing app label
• OCPBUGS-60420 - release-4.19[QuickStarts] Link buttons to other quickstarts are duplicate
• OCPBUGS-60483 - Hostedcluster error about two DNS name in SAN certificate
• OCPBUGS-60767 - Update MCO-OCL OTE and QE tests for pool name matching
• OCPBUGS-60796 - llc test fix: Get updated Performance profile before modifying
• OCPBUGS-60797 - Avoid importing BGP routes for advertised UDN network host subnet
• OCPBUGS-60900 - After scale down the last node has ToBeDeletedByClusterAutoscaler taint if creating a new machineset
• OCPBUGS-60979 - [release-4.19] DNS Egress firewall should remove address_set entries after some time
• OCPBUGS-60983 - [4.19] Update CNO reviewers/approvers
• OCPBUGS-61052 - 4.19: E2E: skip stalld test case checking sched_fifo
• OCPBUGS-61109 - [GCP] with "confidentialCompute: Enabled" settings, the error message complains about "AMDEncryptedVirtualization" rather than "Enabled"
• OCPBUGS-61134 - No Major.Minor.Patch elements found when installing Konflux built OCP on PowerVS

CVEs

(none)

References

(none)