RHBA-2025:1904 - Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform release 4.18.2 is now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

This advisory contains the container images for Red Hat OpenShift Container Platform 4.18.2. See the following advisory for the RPM packages for this release:

https://access.redhat.com/errata/RHSA-2025:1908

Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:

https://docs.openshift.com/container-platform/4.18/release_notes/ocp-4-18-release-notes.html

Solution

For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/4.18/release_notes/ocp-4-18-release-notes.html

You can download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests can be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.

The sha values for the release are as follows:

(For x86_64 architecture)
The image digest is sha256:46f9db00dac167897378825ea5f3cce0867743ac90498bbb61b0816daedd0d00

(For s390x architecture)
The image digest is sha256:0af48dfe14ba32170c2784151bc716afd2054538e324014b552614bd6c1fa1ab

(For ppc64le architecture)
The image digest is sha256:b1abf8e05ec4d8fef28c442b5036d065fefbe9c936d9bc2c468072d5cbf02353

(For aarch64 architecture)
The image digest is sha256:e2f66e3cad52ce9c4839b6de15d33a72df47c610eb200c8b7a303433c4686415

All OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.18/updating/updating_a_cluster/updating-cluster-cli.html

Affected Products

• Red Hat OpenShift Container Platform 4.18 for RHEL 9 x86_64
• Red Hat OpenShift Container Platform 4.18 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.18 for RHEL 9 ppc64le
• Red Hat OpenShift Container Platform for Power 4.18 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 9 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 9 aarch64
• Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 8 aarch64

Fixes

• OCPBUGS-32158 - RegistrySources configuration errors should be bubbled up to HostedCluster
• OCPBUGS-45114 - Inconsistent properties location of maxOpenShiftVersion
• OCPBUGS-45253 - i18n upload/download routine task - sprint 262
• OCPBUGS-46411 - x509: cannot validate certificate for 21.101.0.1 because it doesn't contain any IP SANs
• OCPBUGS-46545 - LGW mode and UDN l2 cannot talk to external
• OCPBUGS-48179 - s390x: AI: Discovery of CPU frequence is failing.
• OCPBUGS-48736 - Console plugins name is null on Operator details page
• OCPBUGS-49320 - GCP Destroy: leaks global backend services
• OCPBUGS-49389 - [4.18] Routes with SHA1 CA certificate break HAProxy reloading
• OCPBUGS-49687 - [CI] Investigate: The HAProxy router converges when multiple routers are writing conflicting status
• OCPBUGS-49774 - Mismatch in documentation and MCO support for RHCOS extensions
• OCPBUGS-49843 - CSI Operator doesn't propagate HCP labels to 2nd level operands
• OCPBUGS-49864 - Runtime panic occurs when clusternetwork CIDR mask is greater than hostPrefix and OVN ipv4 join subnet is provided
• OCPBUGS-49867 - "contentSecurityPolicy" spec not supported by ConsolePlugin CRD (in production)
• OCPBUGS-49921 - [release-4.18] Oh no! Something went wrong error occurs when cluster settings is accessed.
• OCPBUGS-50512 - [release-4.18] UDP packet larger than MTU size can not be sent to its' own pod via the service.
• OCPBUGS-50524 - Correlated query returns empty result due to missing cluster:master_nodes metric
• OCPBUGS-50550 - HyperShift Control Plane Operator doesn't honor proxy env variable in some places
• OCPBUGS-50573 - No refresh popover after adding CSP directive to the ConsolePlugin CR
• OCPBUGS-50621 - ABI day2 pxe install can't reboot from disk properly with the setBootOrder error
• OCPBUGS-50625 - Add RouteAdvertisements support under tech-preview
• OCPBUGS-50638 - vmware-vsphere-csi-driver-operator goes in panic mode
• OCPBUGS-50641 - [ironic-image] Install python3-inotify pkg explicitly
• OCPBUGS-50705 - Operator Bundles should be skipped during the collection phase
• OCPBUGS-50853 - oc-mirror fails with error `unknown image: reference name is empty` when mirroring release payloads with digest and graph=true
• OCPBUGS-50870 - PowerVS: hack DHCP destroy code
• OCPBUGS-50917 - oc-mirror --parallel-images processes one more image than specified
• OCPBUGS-51050 - Cluster fails to complete provisioning when using proxy with custom trust bundle
• OCPBUGS-51057 - [4.18] Running 10 pods with zero-packet-loss annotation crashes irqbalance on a vanilla OCP node
• OCPBUGS-51077 - [4.18] Update openshift/api controller-tools dependency
• OCPBUGS-51099 - oc-mirror failed error :manifest type *ocischema.DeserializedImageIndex is not supported
• OCPBUGS-51100 - [4.18] Persistent Volumes are not creating while using LUN IDs
• OCPBUGS-51104 - v2: oc-mirror complains about "Failed to write to log" during shutdown
• OCPBUGS-51185 - A --dry-run option in oc-mirror version 2 deletes yaml resources in the ocp_mirror/working-dir/cluster-resources/ directory

CVEs

• CVE-2020-11023
• CVE-2024-11187

References

(none)