Synopsis

OpenShift Container Platform 3.4.1.10, 3.3.1.17, and 3.2.1.28 bug fix update

Type/Severity

Bug Fix Advisory

Topic

Red Hat OpenShift Container Platform releases 3.4.1.10, 3.3.1.17, and 3.2.1.28 are now available with updates to packages and images that fix several bugs.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains the RPM packages for Red Hat OpenShift Container Platform 3.4.1.10, 3.3.1.17, and 3.2.1.28. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2017:0513

Space precludes documenting all of the bug fixes in this advisory.

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.10, for details about the 3.4 changes:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.17, for details about the 3.3 changes:

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

For OpenShift Container Platform 3.2, see the following documentation, which will be updated shortly for release 3.2.1.28, for details about the 3.2 changes:

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

All OpenShift Container Platform 3 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.4, see the following documentation, which will be updated shortly for release 3.4.1.10, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.4/release_notes/ocp_3_4_release_notes.html

For OpenShift Container Platform 3.3, see the following documentation, which will be updated shortly for release 3.3.1.17, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.3/release_notes/ocp_3_3_release_notes.html

For OpenShift Container Platform 3.2, see the following documentation, which will be updated shortly for release 3.2.1.28, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/enterprise/3.2/release_notes/ose_3_2_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.4 x86_64
• Red Hat OpenShift Container Platform 3.3 x86_64
• Red Hat OpenShift Container Platform 3.2 x86_64

Fixes

• BZ - 1416850 - Cassandra gets OOM killed because of high tombstone cells
• BZ - 1417652 - The Java command line for Hawkular carries passwords when displaying process (ps)
• BZ - 1418359 - [3.4] Image data stored in ETCD accounting for large DB.
• BZ - 1419607 - iscsi logout even still other pods use iscsi on same node
• BZ - 1424137 - The Java command line for Hawkular carries passwords when displaying process (ps)
• BZ - 1425211 - [3.4] Restarting atomic-openshift-master-api takes ~5 minutes to restart
• BZ - 1425301 - [3.3] Node 100% CPU usage with many stale container volumes and volume_stat_caculator panics
• BZ - 1426775 - iscsi logout even still other pods use iscsi on same node
• BZ - 1427325 - The Heapster command carries passwords when displaying process (ps)
• BZ - 1427544 - The Heapster command carries passwords when displaying process (ps)
• BZ - 1427691 - Build fails with Driver devicemapper failed to remove root filesystem - Device Busy
• BZ - 1429609 - [3.4] [RFE] Configurable minimum TLS version

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.4

SRPM
atomic-openshift-3.4.1.10-1.git.0.c96aed3.el7.src.rpm	SHA-256: a43fa613cf0f0978283b32619ada6ed48db80c957c5447569ff6d1eb6c68a264
x86_64
atomic-openshift-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: a89d41559ce962c792187bf385572eadc20b78eafbcb0ce82cb5241f23520759
atomic-openshift-clients-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: 18afe72f9a0212a104c153d272e2b67a751d334986003d161030f4b31a35cb0b
atomic-openshift-clients-redistributable-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: 71b2459bdad18855b91bd83040df0d0c1d21f8a6a6a5fcbc5c0b05e3bc2cf2ef
atomic-openshift-docker-excluder-3.4.1.10-1.git.0.c96aed3.el7.noarch.rpm	SHA-256: c4a947acc126fee46336138d89de22a543729d81781c4f4a4c6e41933fd9352e
atomic-openshift-dockerregistry-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: 27afc92c850543be87c99429d0b1e7c39bbb802859e6083249059ec7f622d23a
atomic-openshift-excluder-3.4.1.10-1.git.0.c96aed3.el7.noarch.rpm	SHA-256: 592b4e30db3168130a2acaf9c418630bd36a54deb2f575e412721e6571f48fe9
atomic-openshift-master-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: c240c29efba06a5fc72e54dc1199f0708ebd80b70cdff7d5c726a7f0768f8949
atomic-openshift-node-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: eb6005132e9130d1b0c3e26885eabab7a4ea8cc851539a42b0ce96d3c66b6eae
atomic-openshift-pod-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: 4646933b3e41782851a84572de0fc6a6a2b961ba6793bfcdcf9cb585b6363a1c
atomic-openshift-sdn-ovs-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: 97cdd1be1ef1f4215e37974d9a8eb49456cad29ddb2ed617101d732117811f2f
atomic-openshift-tests-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: 3aac88861375699c6dc4ba46dc9f857dee47df83af9e1638809063a23dec86d3
tuned-profiles-atomic-openshift-node-3.4.1.10-1.git.0.c96aed3.el7.x86_64.rpm	SHA-256: aecdebaf6a3395340e4c40f93ae7007f3d116d09efb89bf292b2964da6741990

Red Hat OpenShift Container Platform 3.3

SRPM
atomic-openshift-3.3.1.17-1.git.0.b82e86c.el7.src.rpm	SHA-256: 04c35730346af1fcf83d164d2193f8cc7e4ddd32c3fcdd6770620c390b0e59dc
x86_64
atomic-openshift-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: 8b05a3005d5243b947306b72417fecfb2f1d94984f1db389b7908efa61ca8161
atomic-openshift-clients-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: 5469eb757f076c4fae4a1dcac644c39383443dac04291707ec0bb8085fb5abe8
atomic-openshift-clients-redistributable-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: adca20def4ad440d480ee20678bc432f0dc8b0ae975eeaf377d9f1e8159345aa
atomic-openshift-docker-excluder-3.3.1.17-1.git.0.b82e86c.el7.noarch.rpm	SHA-256: 475d08a169e067164f31d1df9179a8e56e9627de8d623d47b4d88dc81bf4400c
atomic-openshift-dockerregistry-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: e41d7a42f1915f35d6ff9fffc660908fbc8bb5b2fe37731937e7f10d54442070
atomic-openshift-excluder-3.3.1.17-1.git.0.b82e86c.el7.noarch.rpm	SHA-256: 86b9ead4b421874366fc461439b871a3ab5e3f717d3c2983083cc143c3857d17
atomic-openshift-master-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: b5830dfd9f5a85c318b9fc532e53e27063fa2faea7863ac8a22baff1a23b55c8
atomic-openshift-node-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: 51bbad7052c64cc31082469f9b3fef1a00bdc02bb6509329b92f8359ee5ac347
atomic-openshift-pod-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: 615bf739e72f9fd8ecfc63f8e8ee917300a5003f2dae0a45d0548fb2e400b97f
atomic-openshift-sdn-ovs-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: a57335f658bd7811c81e911b4235f29b0d0c33e076709aec05c6f06901ef6be0
atomic-openshift-tests-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: 3a56500996e971094df20933a8c1c91de590b79bf814209b8f397881ad2a8265
tuned-profiles-atomic-openshift-node-3.3.1.17-1.git.0.b82e86c.el7.x86_64.rpm	SHA-256: 99ac5d523aac0923250f689154e5745747fe13eb0df32fd4a0eff990cc905c77

Red Hat OpenShift Container Platform 3.2

SRPM
atomic-openshift-3.2.1.28-1.git.0.b78e5ce.el7.src.rpm	SHA-256: 22dff3252eab6b813fefdafe035050e2743939cead636870ffaa30bb71cfc0b5
x86_64
atomic-openshift-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: 3ca998b11a608c206af6f0baa5b79a3063361ba8c19aba6a187c329eb3583bf9
atomic-openshift-clients-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: 3fb16cdb0a62e9d5d7c652f4f70d395b55a38182e86be7a4460bfea5b5ec8b0a
atomic-openshift-clients-redistributable-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: 9a2901bcf22cbc8c63c4ceaffbe7c9d62973875fbb17a0e018d6b3863f9e48db
atomic-openshift-docker-excluder-3.2.1.28-1.git.0.b78e5ce.el7.noarch.rpm	SHA-256: 8252e724ec5d5a4a021c59eb6decf15a3f2364b8c8acc81bde68c84cf25f1977
atomic-openshift-dockerregistry-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: 3039db7c4518353e25b5de24a95e35afc01574c227fd5519484892012b6959c7
atomic-openshift-excluder-3.2.1.28-1.git.0.b78e5ce.el7.noarch.rpm	SHA-256: 5d9a39231b90a5e17ceb6d5078363270f90dfd422f6b6c225763e0eb4dfb0755
atomic-openshift-master-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: cfa59e0216860d248f802e2969cfdc31f675c159caefc1872384f2775094c6b7
atomic-openshift-node-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: f48a334dcd5fc89edfb62eb74b5b26327e3e14dc7335bcb1fe9f34ca8fc3f5fd
atomic-openshift-pod-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: 7e132b1a4166396af82dabd07d1864adc832940992ed4c8c1bbf83f2b8592f2f
atomic-openshift-recycle-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: c0a1ddb0e14a0a8a0725108420153fb9e4dc95e27b202689cbf3a7b316022ebb
atomic-openshift-sdn-ovs-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: bebbdb431a20be94538679b2084b9c8329937aaa5c78454bff5be65edac5aa53
atomic-openshift-tests-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: b03ebd85485b0ed7099eb09c6d487971c3e71ebd8b745f1b4145c05284f1cd03
tuned-profiles-atomic-openshift-node-3.2.1.28-1.git.0.b78e5ce.el7.x86_64.rpm	SHA-256: 4fe2093c893c82376f7d03ed6691c3f917eeee3b1f958a111b66c87cdf57902d