RHBA-2025:15344 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.17.39 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.17.39. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2025:15323 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/

Solution

For OpenShift Container Platform 4.17 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/ You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha values for the release are as follows:
(For x86_64 architecture) The image digest is sha256:ff55c3a36024cd9f7640e4017ae32ccf609ba64991152d67910799f57cb3c6bd
(For s390x architecture) The image digest is sha256:6cbb4e38bcac52a777690801dc7132d2e17973faa8c1bba3dc8ca9bb96382c53
(For ppc64le architecture) The image digest is sha256:bd8f862bf993fe0cec34a0ce0c4be61eeef8b620fe56f7812d7321761679e22e
(For aarch64 architecture) The image digest is sha256:6f39f2b758294534f05e21a72fc8be5a92e52fc85bffe4601dcfba623dc48038
All OpenShift Container Platform 4.17 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html-single/updating_clusters/index#updating-cluster-cli.

Fixes

• OCPBUGS-58365 - [release-4.17] console-telemetry-plugin: unable to track usage: Forbidden
• OCPBUGS-58451 - Upgrade from 4.14.1 to 4.15.0-ec.2 is stuck but not reported as such by CVO
• OCPBUGS-59620 - Bond-CNI pod failed to recover IPv6 address config after bond interface restart
• OCPBUGS-59747 - OpenShift console PVC clone cannot use B as the unit
• OCPBUGS-59930 - after OVN-K live migration br0 is still present
• OCPBUGS-60249 - Missing endpoint slices for open ports the operator uses
• OCPBUGS-60298 - release 4.18 - openshift-console/download pods running on random nodes
• OCPBUGS-60395 - [release-4.17] Some new network data type not obfuscated in hosted cluster with OVN when obfuscation is enabled
• OCPBUGS-60441 - Filtering nodes in OCP 4.16-17 shows all the nodes in the cluster
• OCPBUGS-60597 - [4.17] AzureDiskCSIDriverOperator degraded with "Observed a panic: "assignment to entry in nil map""
• OCPBUGS-60608 - [release-4.17] Openshift Vertical Pod Autoscaler: fix checkpoint gc of unknown recommenders
• OCPBUGS-60704 - machine-config-operator: clients should not use APIs that are removed in upcoming releases apigroup:apiserver.openshift.io
• OCPBUGS-60791 - [OLMv0] Enable layered operators to include and deploy tailored Network Policies within OLM bundles
• OCPBUGS-60921 - MCE 2.7 konflux
• OCPBUGS-60998 - [release-4.17] Backport Pull Request #127757
• OCPBUGS-61101 - Hypershift OAuth failing to connect to IdentityProvider when using a proxy with additionalTrustBundle and IdentityProvider URL can be publicly verified
• OCPBUGS-61162 - rteval package in openshift-tests image pulls in 82 rpms and 349 MiB

CVEs

(none)

References

(none)