RHSA-2024:3925 - Security Advisory

Topic

An update is now available for Red Hat Ceph Storage 7.1

Description

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.

These new packages include numerous enhancements, bug fixes, and known issues. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on the most significant of these changes:

https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/7.1/html/release_notes/index

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

For supported configurations, refer to:

https://access.redhat.com/articles/1548993

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le

Fixes

• BZ - 1871333 - Discrepancy in bucket and user stats when uploading large number of objects to a versioned bucket.
• BZ - 1954461 - [RGW][Topic]: topic list command lists even the auto generated topic for each notification
• BZ - 1954463 - [RGW][Topic]: remove unused user and bucket name from topic list
• BZ - 1995152 - [rfe][rgw-ms]: rgw sync status reports Input/output error if one rgw fails in a zone having multiple rgws.
• BZ - 2009599 - [RFE] [RGW] include support for Intel QAT acceleration in RHCS
• BZ - 2029585 - (RHCS 7.1) [Workload-DFG] ceph status is not reporting when an application is not enabled on pools
• BZ - 2061627 - [RFE] [RGW-Multisite] Sync Progress tracking improvement
• BZ - 2068026 - allow idmap overrides in nfs-ganesha configuration
• BZ - 2068030 - Can't mount exports when the Ingress daemon is deployed
• BZ - 2079815 - [ceph-dashboard][Security] Dashboard Grafana page is accessible without login credentials
• BZ - 2079897 - [RFE] Re-create OSD superblock if osd_superblock is corrupted
• BZ - 2089167 - [RFE] Enable cephadm to provide one virtual per ganesha instance of the NFS service
• BZ - 2107014 - [5.3-STAGING][RGW-MS] Observing stats inconsistency after stopping and restarting secondary RGWs for 10 mins
• BZ - 2112325 - [RGW][RFE][Please, add a more limited capability than 'users=read' for admin API requests that don't require access to users keys. ]
• BZ - 2125107 - [RADOS - Stretch Cluster] Site weights are not monitored post stretch mode deployment
• BZ - 2130292 - [RFE] - [radosgw-admin] [notification] add admin interfaces to get and delete notifications from bucket
• BZ - 2134786 - Recovery started even though the norecover flag is raised in the stretch cluster
• BZ - 2136766 - PG auto-scaler configs on individual pools is changed after set & unset of "noautoscale" flag
• BZ - 2144472 - [RHCS 7.0] The command `ceph mds metadata` doesn't list information for the active MDS server
• BZ - 2148831 - Observing CEPHADM_CHECK_PUBLIC_MEMBERSHIP warning in cluster with multiple public networks
• BZ - 2149450 - [RFE] Implement Server side encryption support for s3 COPY operation
• BZ - 2153468 - [5.3][rgw-ms][scale]: bucket stats incorrectly reports number of objects at the primary site
• BZ - 2166576 - [RGW][notification][transition]: add support generate notification object pool transition via lifecycle
• BZ - 2172162 - [RFE] add `NewerNoncurrentVersions` to the S3 bucket lifecycle API
• BZ - 2176297 - Unable to bind Ingress to port 2049 when NFS service uses that port
• BZ - 2185792 - Cephadm version command fails with "AttributeError: 'CephadmContext' object has no attribute 'fsid'"
• BZ - 2190366 - [RBD Mirror] Force promote in secondary after primary failure mirror image status is not reflected as promoted image
• BZ - 2207713 - Create RBD mirror monitoring related alerts in Ceph mixins
• BZ - 2213626 - CVE-2023-3128 grafana: account takeover possible when using Azure AD OAuth
• BZ - 2213766 - [CEE/sd][cephadm-ansible] Unable to get global configuration values via cephadm-ansible module ceph_config on RHCS 5.3z3
• BZ - 2217499 - [RGW-NFS]: File rename at NFS mount deletes File itself
• BZ - 2227309 - [RFE] mds: add balance_automate fs setting
• BZ - 2227314 - [5.3z*]RGW Multisite - syntax changed for 'radosgw-admin sync error trim' command help is incorrect
• BZ - 2233659 - cephadm trys to bind grafana daemon to all (::) interfaces when valid networks list is provided.
• BZ - 2235753 - Support snapshot crash consistency across clients
• BZ - 2237038 - [RHOSP 17.1 Hackfest] Attempt to connect to RHCS 5.3 cluster from RHEL 9.2 using v1 protocol causes client core dump
• BZ - 2237574 - [Reads Balancer] osdmaptool with --read option creates suggestions for primary OSD change even when it's already primary for that PG
• BZ - 2238301 - [CephFS-NFS] - json-pretty format value is not working for ceph nfs
• BZ - 2238537 - [RFE][cee/sd] mgr/snap_schedule: Add capability to schedule cephfs snapshot for subvolumes and non-default groups
• BZ - 2238926 - [RGW-NFS]: File rename at NFS mount deletes File itself causing data unavailability
• BZ - 2239726 - CVE-2023-4822 grafana: incorrect assessment of permissions across organizations
• BZ - 2240138 - [cephfs][dashboard] subvolume group delete did not allow.
• BZ - 2240583 - pybind/mgr/volumes: pending_subvolume_deletions count is always zero in fs volume info output
• BZ - 2241030 - [pg-autoscaler] Peformance issue with the autoscaler when we have ~32768 PGs
• BZ - 2241056 - [cephfs][dashabord] Creating volume with more than 1 host causes error
• BZ - 2241104 - [Reads Balancer] output of "osdmaptool <file> --upmap" says no optimizations, even though there are change recommendations in the out file
• BZ - 2241165 - [Dashboard] Daemon redeploy for NFS Ganesha, Haproxy and Keepalive is not reflected in the "Daemon Events"
• BZ - 2242431 - [cephfs][dashabord] naming a volume starts with ".", shows it is invalid.
• BZ - 2243105 - MDS: "1 MDSs behind on trimming" and "2 clients failing to respond to cache pressure".
• BZ - 2243626 - Expecting bluestore-block-db-size config parameter to attach logical volume to OSD as a DB/wal
• BZ - 2244417 - Monitors will not upgrade MDS when file system compatibility would change with fail_fs (cephadm) upgrade scenario
• BZ - 2245261 - nfs exports of cephfs subvolumes path '/volumes/<VOLUME NAME>/<SUBVOLUME NAME>/.snap/...' fails to mount
• BZ - 2247074 - [RGW-Dashboard][RFE]: Provide support to create system user from dashboard
• BZ - 2247140 - RHEL9 random write performance significantly less than RHEL8
• BZ - 2247183 - [RFE] multisite sync observability: tracking sync deltas over time(in Prometheus)
• BZ - 2247531 - [rbd_support] fix hangs and mgr crash when rbd_support module tries to recover from repeated blocklisting
• BZ - 2247586 - [cephfs][mds] mds "allow w" needs appropriate guide for customers
• BZ - 2247718 - Scaling the gateway to 3017 bdevs resulted in a gw exception, and apparent config loss
• BZ - 2248639 - cephfs-mirror: ceph_getxattr call always return -61 (ENODATA) in PeerReplayer::synchronize
• BZ - 2248855 - Observing ~397% CPU usage on dashboard after deploying the nvme service
• BZ - 2249003 - Observing client.admin crash in thread_name 'rados' on executing 'rados clearomap..'
• BZ - 2249068 - rgw: cloud-sync: take upstream changes to permit sync of (virtual) folders
• BZ - 2249518 - Add fields to ceph-nvmeof conf
• BZ - 2249573 - client: queue a delay cap flushing if there are ditry caps/snapcaps
• BZ - 2249651 - multisite: DeleteObjects requests may deadlock in RGWDataChangesLog
• BZ - 2249744 - [RGW][Notification][Kafka]: eTag is empty for event - ObjectCreated:CompleteMultipartUpload
• BZ - 2249812 - [dashboard][rgw]: Create or Modify of user where user name contains '.' fails with error - 'The value is not valid.'
• BZ - 2251004 - The "--op list" option of the Ceph-object-store command results in a "Error getting attr on" message
• BZ - 2251192 - [CephFS Vol Management] - Edit Subvolume Group is not working.
• BZ - 2252048 - Getting an RGW service Segfault when assigning an attribute to an IAM role
• BZ - 2252396 - [rgw][s3select]: rgw going down executing query "select count() from s3object;" on a 10GB csv file
• BZ - 2253313 - 7.1 Enable RocksDB compression in BlueStore
• BZ - 2254121 - [rgw][s3select]: wrong output seen for query "select cast(null as int) from s3object;"
• BZ - 2254122 - [rgw][s3select]: wrong output seen for query "select (true AND false) from s3object;"
• BZ - 2254125 - [rgw][s3select]: wrong output seen for query "select (34.56 % 3.4) from s3object;"
• BZ - 2254480 - [7.0][rgw]: Unable to modify the zone details for the datapool via "radosgw-admin zone set --infile <file>"
• BZ - 2254582 - [rgw][s3select]: wrong output seen for query "select ( not 'Ix8vrSP6MNFNMnjLG0XB' ) from s3object;"
• BZ - 2255030 - Mount command returning error as MDS is laggy for unauthorized client
• BZ - 2255255 - Ceph dashboard: RHSSO created users cannot view user info in dashboard
• BZ - 2255938 - [Tracker #63613]: Using custom lc schedule (work time) may cause lc processing to stall.
• BZ - 2256560 - change priority of mds rss perf counter to useful
• BZ - 2256967 - [rgw] uploads with java and golang SDKs can fail when checksum is requested
• BZ - 2257978 - Observing output format change for radosgw-admin bucket check command in 6.1z4
• BZ - 2258143 - CVE-2023-49569 go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
• BZ - 2258165 - CVE-2023-49568 go-git: Maliciously crafted Git server replies can cause DoS on go-git clients
• BZ - 2258542 - ceph-objectstore-tool and ceph-bluestore-tool fail with mount error post upgrade
• BZ - 2258879 - s3select module regression to 9ade26c
• BZ - 2258940 - [cee/sd][cephadm-ansible] cephadm-preflight playbook fails at TASK [disable older rhceph repositories if any]
• BZ - 2258951 - Export rgw multisite status via the API
• BZ - 2258997 - Improve rbd_diff_iterate2() performance in fast-diff mode
• BZ - 2259179 - [Ceph 7 clone] [CEE/SD][cephfs] mds crash: void MDLog::trim(int): assert(segments.size() >= pre_segments_size)
• BZ - 2259461 - [NFS-Ganesha] Updating any entry in the volume export file (Changing RW to RO or Adding vers=3 in volume export file) resulting in mount failure on client side.
• BZ - 2259938 - [RFE] [NFS-Ganesha] Implement prerequisite in the ceph codebase itself to enable the NFS v3 mount on linux or windows client
• BZ - 2260003 - mds: do not evict clients if OSDs are laggy
• BZ - 2260835 - Dashboard gives 500 error when attaching the policy to rgw roles
• BZ - 2261239 - add RHEL 8 client RPMs
• BZ - 2262094 - During upgrade a cluster might exhibit additional load from conveying full OSDMaps instead of incrementals due to CRC mismatch
• BZ - 2262400 - [7.1][rgw-archive]: Duplicates objects observed even when archive zone is configured to sync from just one zone in a multi-site
• BZ - 2262469 - [GSS] regression from 5.3z5 on the handling of HotSwap SATA drives.
• BZ - 2262650 - [GSS]Missing Objects in RGW S3 bucket while making GET request - 404 not found error
• BZ - 2262741 - [rgw-multipart/encryption]: Object download fails with "MD5 signatures do not match" if transitioned to other storage class
• BZ - 2262919 - [RGW]: Bucket owner change fails on a bucket with rate limit set
• BZ - 2262984 - [Ceph Dashboard]: Expose NVMe-oF Gateway APIs
• BZ - 2263813 - [cephadm]: Cephadm had crashed and cephadm module failed
• BZ - 2263898 - mgr/cephadm is not configuring the prometheus endpoints for nfs-ganesha
• BZ - 2263990 - node-proxy: hardware inventory and monitoring support
• BZ - 2264141 - [Ceph Dashboard]: CephFS Snapshot Management
• BZ - 2264142 - [RFE] [Ceph-Dashboard]: CephFS Snapshot Clone Creation
• BZ - 2264145 - [RFE] [Ceph-Dashboard]: CephFS Snapshot Schedules Management
• BZ - 2264158 - [ceph-dashboard/rgw][rfe]: Provision to delete rgw roles via the UI (ceph-dashboard)
• BZ - 2264168 - [Cephadm][Cluster Purge] cephadm command "rm-cluster" not deleting file "podman-auth.json" from path "/etc/ceph" after purge.
• BZ - 2264177 - mds, cephfs-mirror: add labelled perf counters
• BZ - 2264212 - Enable the hw/monitoring agent by default (node-proxy)
• BZ - 2264213 - Add rgw tags and acl management to dashboard
• BZ - 2264222 - [ceph-dashboard] add management of rgw bucket policies
• BZ - 2264348 - mgr/snap_schedule: make monthly spec consistent with other parts of ceph
• BZ - 2264812 - prometheus listens on 0.0.0.0:9092 and conflicts with HAProxy on director-deployed ceph env
• BZ - 2264836 - mgr/snap_schedule: catch all exceptions to avoid crashing module
• BZ - 2265059 - update nfs-ganesha to V5.7 in RHCS 7.1
• BZ - 2265148 - [rgw-multisite]: objects named "." or ".." are not replicated
• BZ - 2265262 - [CephFS - Consistency Group] - quiesce state remains in QUIESCING for >20mins
• BZ - 2265322 - [NFS-Ganesha][v3] On scale cluster, ganesha memory not getting freed up (~ 9.4 GB ) post completing test and cleanup
• BZ - 2265415 - [GSS] MDS crashes after upgrade to RHCS 6.1z4 - "assert_condition": "lock->get_state() == LOCK_LOCK || lock->get_state() == LOCK_MIX || lock->get_state() == LOCK_MIX_SYNC2"
• BZ - 2265558 - RGW. Ops Perf Counter TimeStamp bucket filtering
• BZ - 2265574 - RGW labeled perf counter metrics sent by ceph-exporter dont difference between user and bucket
• BZ - 2265890 - [rgw][7.1]: object lock retainUntilDate can overflow (32bit seconds)
• BZ - 2265994 - [CephFS - Snap Scheduler UI] - Monthly and Yearly schedule intervals is missing in Schedule drop-down in Snapshot schedules
• BZ - 2266020 - [CephFS - Consistency Group] - quiesce state remains in QUIESCING if IO was run subvolume uuid parent directory
• BZ - 2266092 - rgw: uncaught exception from AWSv4ComplMulti during java AWS4Test.testMultipartUploadWithPauseAWS4
• BZ - 2266223 - [CephFS - Consistency Group] - Quiesce doesn't succeed on mixed set of subvolumes
• BZ - 2266227 - [CephFS - Consistency Group] - subvolume include with --await to existing quiesced set doesn't succeed
• BZ - 2266248 - client.rgw crash found for RGWRados::copy_obj_data (RGWCopyObj::execute(optional_yield)+0x869) [0x55f8acc8fc49]
• BZ - 2266256 - [Dashboard][Cephfs] Attach command for kernel mount missing few options
• BZ - 2266411 - [rgw][s3-tests]: test_object_anon_put_write_access failed with "An error occurred (XAmzContentSHA256Mismatch) when calling the PutObject operation"
• BZ - 2266529 - [RGW QAT]: We are not able to configure QAT co processors inside the RGW container
• BZ - 2266530 - [7.1 ceph snapshot schedule UI] Snapshot schedule from dashboard is failing with invalid ISO format error
• BZ - 2266579 - Etag element has empty string for complete-multipart-upload output
• BZ - 2267040 - [CephFS - Consistency Group] - MDS slowness occurs when quiesce started on pre-upgrade subvolumes while IO was in-progress
• BZ - 2267624 - cephadm binary is missing the new daemon NodeProxy as supported daemon.
• BZ - 2267625 - the node-proxy daemon fails to send data to the mgr endpoint
• BZ - 2267715 - [RFE] QoLife improvements for "/usr/bin/rgw-restore-bucket-index" tool
• BZ - 2267763 - [NFS-Ganesha] [Dashboard] Enable support in Ceph Dashboard to create ganesha export with v3 enabled
• BZ - 2267814 - [NFS-Ganesha] [Dashboard] Modifying the export block causing the export v3 changes wipe away.
• BZ - 2267957 - [ceph-dashboard] add hardware status summary
• BZ - 2268036 - [CephFS - Snap Scheduler UI] - Error for incorrect ISO format start string
• BZ - 2268039 - [CephFS - Snap Scheduler UI] - In toggle columns under schedules tab, there is no description for unchecked box
• BZ - 2268040 - [CephFS - Snap Scheduler UI] - In toggle columns, check on first box displays column with duplicate name 'Path' for column field
• BZ - 2268059 - [ceph-dashboard][RGW]: Discrepancy seen with output of bucket stats, get tagging when bucket(without tags) created from dashboard vs cli (s3-client)
• BZ - 2268414 - [CephFS - Snap Scheduler UI] - Snap schedule Path string pattern is not consistent after create
• BZ - 2268560 - [CephFS - Snap Scheduler UI] - Retention policy for monthly interval added in CLI is seen as undefined in Dashboard
• BZ - 2268567 - [CephFS - Snap Scheduler UI] - Edit of snap schedule not possible if duplicate snap schedules exists
• BZ - 2268996 - CAPS for mds changes as per cmount path in NFS export
• BZ - 2269038 - rgw: take fixes for known swift container listing issue
• BZ - 2269321 - [Dashboard][Cephfs] nfs mount command in attach dailog need syntax modification
• BZ - 2269337 - mds: check the layout in Server::handle_client_mknod
• BZ - 2269347 - osdc/Journaler: better handle ENOENT during replay as up:standby-replay
• BZ - 2269374 - [node-proxy] the RedFishClient.logout() can never logout from the redfish API
• BZ - 2269381 - RGW hangs when kafka broker is down for non-persistent notifications
• BZ - 2269526 - add debug logs when setting ceph.dir.subvolume vxattr
• BZ - 2269662 - [Ceph Dashboard]: Improve left navigation layout
• BZ - 2269664 - mds: disable defer_client_eviction_on_laggy_osds by default
• BZ - 2269687 - mds: add a command to dump directory information
• BZ - 2270211 - [NFS-Ganesha] NLM and Rquota should be enabled in NFS-Ganesha config file for locking functionality to work with v3 protocol
• BZ - 2270237 - [CephFS - Snap Scheduler UI] - Retention field available during snap schedule create, but using it generates an error.
• BZ - 2270245 - [RGW-NFS]: Getting Error:"Operation not permitted" at rgw nfs mount point
• BZ - 2270334 - [rgw/LC transition]: A few buckets stuck in UNINITIAL state when applying LC policy to multiple buckets
• BZ - 2270402 - [LC-Process]: Executing radosgw-admin lc process --bucket <bkt-name> without setting lc rule results in Segmentation fault
• BZ - 2270442 - [Tracker][HA]Strictly do not assign a new Gateway's load balancing group number to a Gateway upon "ceph orch daemon rm"
• BZ - 2270625 - [RGW-NFS]: mv operation at nfs mount point causing nfs crash
• BZ - 2270645 - [Ceph Dashboard] Overall performance tab not displaying graphs when anonymous_access is set to false for grafana
• BZ - 2270656 - [NVMe-7.1-Tracker] [NVMe HA] NVMe initiator disconnects and the nvme disks on the stopped gateway node disappear from the client post failback
• BZ - 2270785 - [CephFS - Consistency Group] - QuiesceDB may roll back when a rank membership is unstable
• BZ - 2271096 - [CephFS - Consistency Group] - Quiesce command failed with error EBADF on scaled config
• BZ - 2271110 - [ceph-dashboard] Add CephFS authorization
• BZ - 2271135 - [cee/sd][ceph-dashboard] Grafana portal doesn't show Graphs in the RGW sync overview page
• BZ - 2271399 - [rgw-ms][assume-role]:After a successful assume role api call on the secondary site, s3 bucket create fails with http_status 403
• BZ - 2271806 - Delete bucket tagging via cli is not successful
• BZ - 2271835 - [CephFS - Consistency Group] ECANCELED error seen when cancel is run on quiesce set with --await
• BZ - 2271938 - [rgw-multisite]: object PutACL doesn't replicate
• BZ - 2272031 - [CephFS - Consistency Group] - High CPU utilisation 59.8% by MDS in Baremetal Ceph with CG quiesce testing
• BZ - 2272038 - [NVMe-7.1-Tracker] [NVMe HA] Failback failed on a gateway after performing failover/failback using ceph orch daemon stop/start command for 4 gateway configuration
• BZ - 2272157 - [NVMe-7.1] Mon slow ops observed due to NVMeoFGW beacon
• BZ - 2272437 - [Tracker]GWs are unstable as host is disconnected from subsystem due to KA timeout and hence no safe connections to subsystems
• BZ - 2272468 - cephfs-top: include the missing fields in --dump output
• BZ - 2272621 - node-proxy service being listed under ceph orch ls even though it is not setup
• BZ - 2272622 - [CephFS - Snap Scheduler UI] - Retention field drop-down for interval shows Minutely even when ceph config set to false or in default state.
• BZ - 2272632 - [Bluewash][Ceph Dashboard][7.1] Multi-Cluster - overview page does not display details of the connected clusters
• BZ - 2272647 - [CephFS - Snap Scheduler UI] - Snap Schedule delete fails with error 'Retention for m:3 was not set for <path> can't remove'
• BZ - 2272661 - mon: add NVMe-oF gateway monitor and HA
• BZ - 2272662 - ceph-nvmeof-mon fixes
• BZ - 2272979 - mds: ensure snapclient is synced before corruption check
• BZ - 2273000 - Upgrade to newer versions of table , graph, piechart panels in grafana dashboards for grafana 10
• BZ - 2273608 - [IBM nvmeof:1.1.0-1] NVMeOF deployment fails with ImportError for monitor_pb2_grpc
• BZ - 2273693 - [Ceph-Dashboard][Grafana]: Mount the grafana dashboards from the ceph container
• BZ - 2273836 - fix slow ops and last_leader logic
• BZ - 2273837 - cherry pick some commits in nvmeof.py from upstream
• BZ - 2273927 - Fix permissions of nvme-gw show command
• BZ - 2273935 - [CephFS - Consistency Group] - Quiesce timedout for a subvolume with a client running under a high load
• BZ - 2273936 - ceph-volume raw list and activate fail
• BZ - 2273938 - [rgw-ms][roles]: Deleting rgw roles from primary doesn't sync to secondary
• BZ - 2274305 - GW deployment fails self.identity.fsid
• BZ - 2274703 - Failure adding namespace to subsystem on nvmeof Gateway
• BZ - 2274704 - Namespace count mismatch between two nvmeof gateways from same ceph cluster and pool
• BZ - 2275103 - fixing issue : same group set to Active on 2 gws, and propose state change when subsystems reported by the gateway changes
• BZ - 2275323 - [rgw][s3select]: radosgw process killed with "Out of memory" while executing query "select * from s3object limit 1" on a 12GB parquet file
• BZ - 2275459 - [CephFS - Consistency Group] - Quiesce fails randomly with error EBADF
• BZ - 2275463 - [RFE][multisite-dashboard]: During zone creation access/secret key should not be compulsory provide an edit option to set these keys
• BZ - 2275506 - Update release to be 1.2 instead of a specific version (e.g. 1.2.1)
• BZ - 2275861 - [Ceph-Dashboard]: Token import throws internal server error which results in multisite configuration failure
• BZ - 2276031 - Namespace add command output interprets wrong load balancing group number though it assigns correctly
• BZ - 2276034 - [Usability][logs] Set log_level lower than INFO for frequent get_subsystems calls unless it is user called
• BZ - 2276038 - [Tracker] Add alerts to ceph monitoring stack for the nvmeof gateways
• BZ - 2276340 - RGW metrics listing in ceph-exporter is not visible in Prometheus
• BZ - 2276361 - [sse-s3] Object is not encrypted when copied from a non-encrypted bucket to an encrypted bucket
• BZ - 2276379 - Module 'cephadm' has failed: 'NvmeofService' object has no attribute 'pool'
• BZ - 2276498 - [7.0 RGW-Multisite]: Crash observed in boost::asio module
• BZ - 2276636 - Unable to retrieve GW CLI version
• BZ - 2276900 - Change default values for OMAP lock parameters in nvmeof
• BZ - 2276989 - [CephFS - Consistency Group] mds: omnibus bug fixes
• BZ - 2277099 - Add version to nvmeof monitor map + add monitor disconnect panic
• BZ - 2277143 - [CephFS-Mirror][Backport-7.1] - snapshot mirror peer-list shows only 1 Mon IP instead of all the Mon Host IP's
• BZ - 2277692 - nvmeof namespace resize fails while expanding image/ namespace
• BZ - 2277699 - NVMe Deployment failed with Ceph 18.2.1-155 and NVMeoF 1.2.4-1
• BZ - 2277830 - cephadm: nvmeof: update auth to "osd - profile rbd"
• BZ - 2277944 - [7.1z clone] Ceph health getting to warning state with "HEALTH_WARN 1 MDSs report slow requests" roughly 2 hours after cluster installation
• BZ - 2277945 - mgr/dashboard: RBD snapshots cloned (format v2) and then deleted causes Not Found/404 in the source RBD Image
• BZ - 2277947 - Fix client panic in case of network partition, and in case of monitor leader election
• BZ - 2278166 - [CephFS - Consistency Group] quiesce may timeout due to a number of internal race conditions, described by the linked upstream tickets
• BZ - 2278326 - [encryption/compression]: Multipart object download fails with AccessDenied error when transitioned to another storage class
• BZ - 2278778 - [7.1 Upgrade] : Upgrade of MGR in staggered approach also started upgrading NVMeoF service
• BZ - 2279339 - [rgw/cloud transition]: RGW asserts in thread "wp_thrd" during cloud transition of objects at a scale of 3 miilion
• BZ - 2279352 - Multiple entries found for same host in GWMon Map
• BZ - 2279461 - [RGW-MS][granular sync policy] Sync to and from specific zone failed with "Unknown parameter in ReplicationConfiguration"
• BZ - 2279530 - rbd-mirror daemon in ERROR state, require manual restart [7.1]
• BZ - 2279607 - [rgw/LC]:Failure to remove LC rule via s3cmd dellifecycle despite objects not expiring or transitioning
• BZ - 2279862 - Upon re-deployment after successful cleanup - Invalid entries are on nvme-gw show output and hence wrong assignment of LB group to namespaces which breaks HA
• BZ - 2280205 - send unavailable in beacon response to gw that did not exit after failover
• BZ - 2280332 - nvmeof GW exits after fully startup is not performed after brought back post failover leading to WAIT_FAILBACK_PREPARED ana_state
• BZ - 2280742 - [NVMe-7.1-Tracker] [NVMe HA] [4 GW] One of the nvme gateways is down after few tries to initiate.
• BZ - 2280954 - [rgw/dashboard]: Creating a new realm via the dashboard, makes it a default realm
• BZ - 2281465 - Bad deployment of nvmeof GWs - group name is None
• BZ - 2281471 - explicit action on detected of "synchronization lost" condition between Monitor and GW
• BZ - 2282364 - NVMeoF GW Upgrade from 18.2.1-173 to 18.2.1-188 failed
• BZ - 2282533 - [CephFS - Consistency Group] - quiesce may time out or crash due to an interlock with exporting and other inter-rank operations
• BZ - 2283630 - vSphere plugin Datastore expansion is not working

CVEs

• CVE-2023-3128
• CVE-2023-4822
• CVE-2023-49568
• CVE-2023-49569

References

• https://access.redhat.com/security/updates/classification/#critical