RHBA-2016:2010 - Bug Fix Advisory

Topic

Updated logging-elasticsearch container images that fix a bug are now available for Red Hat OpenShift Container Platform 3.1 and 3.2.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This update fixes the following bug:

• The OpenShift-Elasticsearch-Plugin did not remove the .all Kibana mapping for users that were cluster-admin but then had the role reverted. If a user was no longer a cluster-admin, they could still be able to view the .all Kibana mapping. They would not be able to see the logs for projects they did not have access to, but they would still incorrectly see the mapping. This bug fix updates the OpenShift-Elasticsearch-Plugin to remove the .all Kibana mapping to users that are not cluster-admin. As a result, non-cluster-admin users are not able to see the .all mapping if they are no longer cluster-admin. (BZ#1378702)

This advisory contains the RPM packages for this release. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2016:2011

All OpenShift Container Platform 3 users are advised to upgrade to these updated images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update your logging stack to use these latest images, see the following "Upgrading the EFK Logging Stack" manual upgrade documentation that relates to your installed version of OpenShift Container Platform.

For OpenShift Container Platform 3.2:

https://docs.openshift.com/enterprise/3.2/install_config/upgrading/manual_upgrades.html#manual-upgrading-efk-logging-stack

For OpenShift Container Platform 3.1:

https://docs.openshift.com/enterprise/3.1/install_config/upgrading/manual_upgrades.html#manual-upgrading-efk-logging-stack

Affected Products

• Red Hat OpenShift Container Platform 3.3 x86_64
• Red Hat OpenShift Container Platform 3.1 x86_64

Fixes

• BZ - 1378702 - .all index is visible to ordinary user

CVEs

(none)

References

(none)