RHEA-2024:4630 - Product Enhancement Advisory

Topic

OpenShift Update Service v5.0.3 is now available for Red Hat OpenShift Container Platform.

Description

The OpenShift Update Service uses the update protocol called Cincinnati, which
is designed to facilitate automatic updates.

This version includes various bug fixes and other reliability improvements.

We recommend installing only the latest version of OpenShift Update Service Operator.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64

Fixes

• OCPBUGS-22392 - OSUS does not parse namespaced registry authentication entries
• OTA-1045 - Cincinnati: Forwards compatibility for graph-data versions
• OTA-915 - Teach Cincinnati to serve signatures from graph-data tarballs
• OTA-1267 - Cincinnati compatibility with Cosign / Sigstore signatures

CVEs

• CVE-2021-43618
• CVE-2023-2953
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-5678
• CVE-2023-6004
• CVE-2023-6918
• CVE-2023-7104
• CVE-2024-25062
• CVE-2024-28182
• CVE-2024-28834
• CVE-2024-33599
• CVE-2024-33600
• CVE-2024-33601
• CVE-2024-33602

References

(none)