RHSA-2025:3635 - Security Advisory

Topic

An update is now available for Red Hat Ceph Storage 8.0.

Description

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.

These new packages include numerous enhancements, bug fixes, and known issues. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on the most significant of these changes:

https://docs.redhat.com/en/documentation/red_hat_ceph_storage/8/html/8.0_release_notes

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

For supported configurations, refer to:

https://access.redhat.com/articles/1548993

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le

Fixes

• BZ - 2252403 - [rgw][s3select]: radosgw process killed with "Out of memory" while executing query "select * from s3object limit 1" on a 12GB parquet file
• BZ - 2313281 - [rgw][topic]: on an upgraded environment from 7.1 to 8.0, radosgw-admin topic list outputs 'n' topics 'n' number of times
• BZ - 2322352 - On the scale cluster, rm -rf on the NFS mount point is stuck indefinitely when cluster is filled around 90% <eom>
• BZ - 2331338 - cephfs-mirror: eliminate redundant ceph_close() call
• BZ - 2335767 - [8.0z backport][GSS] TypeError in Ceph Dashboard when accessing /api/osd/settings after upgrade to Ceph 7 (18.2.0-192.el9cp)
• BZ - 2342266 - [NFS-Ganesha] Ganesha crashed in setNode_pc (qos_block=0x0, client_addr=<optimized out>, node=0x7f3b74012ac0) after enabling the QoS feature
• BZ - 2342728 - [8.0z backport] tools/cephfs/DataScan: test and handle multiple duplicate injected primary links to a directory
• BZ - 2342750 - NFS cluster creation is failing with latest 8.0z3 build
• BZ - 2342981 - [8.0z clone] Snapshots doesn't work when the caps for implicit namespace is set
• BZ - 2343514 - [NFS-Ganesha] NFS-Ganesha crashes at nfs_rpc_valid_MNT after enabling QoS configurations.
• BZ - 2345560 - Unable to Delete Objects when RADOS Pool quota hits Max
• BZ - 2345723 - Wrong "stopped" mirroringStatus summary in radosnamespace [8.0z]
• BZ - 2346194 - cephadm: patches for IBM cloud
• BZ - 2346828 - STS Federated Users Shadow User UID is missing "oidc$"
• BZ - 2347559 - [Backport-8.0z3]- ceph-fuse mount attempts on client nodes core dumping
• BZ - 2348396 - [RFE][RGW][kafka] add support for multiple brokers
• BZ - 2348462 - [8.0z backport] [10k osd][RGW] rgw daemon segmetation fault _pg_to_raw_osds
• BZ - 2348701 - [8.0z backport][NFS-Ganesha] On the freshly installed NFS cluster, configuration error warnings were observed in the ganesha.log file
• BZ - 2348728 - [8.0z3] [NFS-Ganesha] Unable to Trigger gRPC Server in NFS-Ganesha
• BZ - 2349083 - [8.0] [Read Balancer] pg_upmap_primary items are retained in OSD map for a pool which is already deleted
• BZ - 2349100 - [8.0] [Read Balancer] {rm-,}pg-upmap-primary should require the feature support also from mons and osds
• BZ - 2349102 - [8.0] [Read Balancer] Decoders of OSDMap use old version for comparison of with struct_compat of DECODE_START
• BZ - 2349928 - [RGW] RGW crashes when performing multipart upload using AWS CLI.
• BZ - 2350879 - Ingress Service not working when using virtual_ips_list option
• BZ - 2351003 - [NFS-Ganesha] CONFIG :WARN :Syntax error in statement at line 17 of /etc/ganesha/ganesha.conf for Server_Scope = 4da66c06-fd28-11ef-8341-fa163e07d392-nfsganesha
• BZ - 2351038 - [NFS-Ganesha] Ceph cluster enters "HEALTH_ERR" state while attempting to delete the NFS-Ganesha cluster, and the NFS service remains stuck in the "deleting" state.
• BZ - 2351127 - [ceph-dashboard] add hardware status summary
• BZ - 2351205 - [NFS-Ganesha][Ceph-Mgr] Correct the min and max supported values for bandwidth and iops limits in rate limiting
• BZ - 2351464 - FFU upgrade from 16.2.6 to 17.1.4 - Missing metrics for individual RBD images
• BZ - 2351823 - iscsi-tcmu container not getting upgraded when upgraded from 8.0z2(19.2.0-98.el9cp) GA build to 8.0z3(19.2.0-108.el9cp) build
• BZ - 2352781 - [NFS-Ganesha] Unexpectedly high memory utilization (31.1 GB) is observed when enabling bandwidth and OPS control limits at both the cluster and export levels in a scaled cluster environment (2000 exports).
• BZ - 2353296 - [rgw] small objects download failing with checksum-mismatch error using client aws-cli/2.24.22
• BZ - 2353378 - [NFS-Ganesha] The QoS-related logs are flooding the ganesha.log, causing the log scrolling to freeze on the scaled cluster due to increased log size.
• BZ - 2355038 - [rgw][checksum]: get-object-attributes for multipart objects uploaded with SHA1 or SHA256 algorithm is returning FULL_OBJECT for ChecksumType instead of COMPOSITE
• BZ - 2355056 - [IBMSC][8.0z3][SMB] SMB Service Deployment Fails with Latest Builds
• BZ - 2355689 - [rgw][checksum]: complete-multipart-upload is not returning ChecksumType in the response
• BZ - 2355790 - [rgw] memory leak in complete-multipart-upload

CVEs

• CVE-2024-47191

References

• https://access.redhat.com/security/updates/classification/#important