- Issued:
- 2024-02-29
- Updated:
- 2024-02-29
RHBA-2024:1043 - Red Hat OpenShift Data Foundation 4.14.5 Bug Fix Update
Synopsis
Red Hat OpenShift Data Foundation 4.14.5 Bug Fix Update
Type/Severity
Bug Fix Advisory None
Topic
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.14.5 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.
Description
Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3-compatible API.
Bug fixes:
- Previously, Multicloud Object Gateway (MCG) client was not able to connect to S3 using the new certificate unless the MCG endpoint pods were restarted. Even though the MCG endpoint pods were loading the certificate for the S3 service at the start of the pod, the changes in the certificate were not watched, which means that rotating a certificate was not affecting the endpoint till the pods were restarted.
With this fix, a watch to check for the changes in certificate of the endpoint pods are added. As a result, the pods load the new certificate without the need for a restart. (BZ#2259839)
- Previously, the
rook-ceph-rgw-ocs-storagecluster-cephobjectstore-apod was stuck inCrashLoopBackOffstate as the RADOS Gateway (RGW) multisite zonegroup was not getting created and fetched, and the error handling was reporting wrong text.
With this release, the error handling bug in multisite configuration is fixed and fetching the zonegroup is improved by fetching it for a particular rgw-realm that is created earlier. As a result, the multisite configuration and rook-ceph-rgw-ocs-storagecluster-cephobjectstore-a pod gets created successfully. (BZ#2254547)
All users of Red Hat OpenShift Data Foundation are advised to upgrade to these updated images, which provide these bug fixes.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat OpenShift Data Foundation | 4 | x86_64 |
| Red Hat OpenShift Data Foundation for RHEL 9 ARM | 4 | aarch64 |
| Red Hat OpenShift Data Foundation for IBM Z and LinuxONE | 4 | s390x |
| Red Hat OpenShift Data Foundation for IBM Power, little endian | 4 | ppc64le |
Fixes
- This content is not included.BZ - 2246527
- This content is not included.BZ - 2250226
- This content is not included.BZ - 2254547
- This content is not included.BZ - 2263311
- This content is not included.BZ - 2263312
- This content is not included.BZ - 2263313
- This content is not included.BZ - 2263314
CVEs
- CVE-2021-35937
- CVE-2021-35938
- CVE-2021-35939
- CVE-2023-5363
- CVE-2023-5981
- CVE-2023-7104
- CVE-2023-27043
- CVE-2023-29406
- CVE-2023-29409
- CVE-2023-43804
- CVE-2023-45803
- CVE-2024-0553
- CVE-2024-0567
References
(none)
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.