RHSA-2025:11814 - Security Advisory

Topic

Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update

Description

Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/4.19/html/updating_openshift_data_foundation/updating-ocs-to-odf_rhodf

Fixes

• DFBUGS-2705 - [Backport to 4.19.0] invalid_storage is shown in the --all_connection_details
• DFBUGS-2324 - rook-ceph-rgw-ocs-storagecluster-cephobjectstore pod crashes with ODF v4.19.0-75 deployment with host networking enabled
• DFBUGS-2279 - ODF 4.19.0-75 internal mode deployment deploys pods on Control nodes
• DFBUGS-2273 - Not able to create CORS rules from UI
• DFBUGS-2031 - Connection information is wrongly listed for noobaa-cli diagnose health --all_connection_details
• DFBUGS-1917 - [GSS]Rook-ceph-exporter pods keep spinning up
• DFBUGS-1801 - ODF with RDR and multipath fails during upgrade from 4.17 to 4.18 - OSD migration fails as ceph-volume fails to fetch the multipath device
• DFBUGS-1634 - [UI] Skeleton Screens, data elements are misplaced, incorrect color scheme
• DFBUGS-1627 - odf-console pie graph text has minimal contrast - is dark against a dark background
• DFBUGS-857 - [RDR] Unable to set recipe parameters when enrolling discovered application
• DFBUGS-734 - [2309444] [RDR] When cluster was upgraded from 4.16 to 4.17 osd migrated to new ceph osd id's
• DFBUGS-711 - [2313185] [IBM_Support] Rados clone data objects are not getting trimmed and consuming the space in the cluster even after upgrade to ODF 4.14
• DFBUGS-585 - [2323317] ODF mg doesn't capture everything with portworx installed
• DFBUGS-513 - [2319814] [RDR] Volsync Job Name exceeds 63 characters when application PVC exceeds 42 characters
• DFBUGS-501 - [2305603] [CNV][MDR] VM not failed over and in WaitForReadiness status
• DFBUGS-340 - [2321386] [RDR] When globalnet is needed but it's not enabled, output shows this as a info
• DFBUGS-289 - [2313368] Must-gather is not collecting old(.gz files) csi logs from client cluster in provider mode setup
• DFBUGS-280 - [2296500] Ceph osd aborted in thread 7f71d41a9640 thread_name:safe_timer

CVEs

• CVE-2022-3517

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/