- Issued:
- 2017-12-18
- Updated:
- 2017-12-18
RHBA-2017:3464 - Bug Fix Advisory
Synopsis
Red Hat OpenShift Container Platform 3.7 bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update is now available for Red Hat OpenShift Container Platform 3.7.14.
Description
OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for this release. An advisory for the container images for this release is available at: https://access.redhat.com/errata/RHBA-2017:3465.
Space precludes documenting all of the bug fixes and enhancements in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html
All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages and images.
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For OpenShift Container Platform 3.7, see the following documentation, which will be updated shortly for release 3.7.14 for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:
https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.
Affected Products
- Red Hat OpenShift Container Platform 3.7 x86_64
Fixes
- BZ - 1247627 - [RFE] pod list in "browse" tab shows spinning icon which is confusing
- BZ - 1430035 - Support HTTP Strict Transport Security (HSTS) policy
- BZ - 1456988 - [RFE] ability to set the cookie name, with an annotation
- BZ - 1479672 - collectd.cpu.percent is transformed to collectd.CPU.percent
- BZ - 1494912 - metrics indexes should not save the _source
- BZ - 1497274 - byo failed against atomic hosts with containerized=True: docker_image_availability
- BZ - 1502033 - Service catalog fails to propagate Service Plan updates to clusterServicePlan object
- BZ - 1505757 - Sample command in oc new-app help page not work
- BZ - 1506073 - when a user has an explicit value for cpu_limit that is lower than the default for the cpu_request, we should be setting the cpu_request to be the same value as the cpu_limit
- BZ - 1506361 - Log Spam: error syncing image
- BZ - 1507246 - Add the ability to have the GlusterFS ansible script run more than once
- BZ - 1507433 - oadm migrate storage failed in upgrade process
- BZ - 1508061 - master-controllers panic running conformance. concurrent map iteration and map write in start_master.go
- BZ - 1508938 - Context needs to be sent with UpdateInstanceRequests from catalog to brokers
- BZ - 1509271 - [ASB] one dependency is missing in PostgreSQL(apb)
- BZ - 1509366 - Error syncing catalog from ServiceBroker
- BZ - 1509793 - Not able set env vars in jenkinsPipelineStrategy
- BZ - 1510496 - openshift_logging_es_pvc_size not honored by openshift-logging playbook
- BZ - 1511110 - Logging deployments are not maintaining the association of DC to PVC claim for Elasticsearch causing deployment failures
- BZ - 1511149 - Downstream MySql APB Deprovision Fails unexpected key 'propagation_policy'
- BZ - 1511719 - operations logs lost if no ops cluster and no @OUTPUT label
- BZ - 1512430 - [ASB]postgresql APB provision fails in multitenant environment
- BZ - 1512679 - Failed docker builds leave temporary containers on node
- BZ - 1512793 - fail to re-install ocp with ansible-service-catalog deployed
- BZ - 1512832 - [3.7] Registry console pod meets CrashLoopBackOff
- BZ - 1512978 - [3.7] Fix support for CNS deployment
- BZ - 1513054 - Delete /var/lib/dockershim/sandbox/* after drain when upgrading from 3.6
- BZ - 1513767 - [3.7] Allow egress router to run on non-default interface
- BZ - 1515457 - [3.7] fact gathering fails during upgrade from 3.4 to 3.5 on delete_empty_keys(facts['master']['admission_plugin_config']['BuildDefaults']['configuration']['env'])\r\nKeyError: 'env'\r\n"
- BZ - 1516530 - [3.7] glusterfs installation failed: Unable to find 'v3.7/glusterblock-template.yml'
- BZ - 1517225 - Install CNS failed when copy initial glusterblock provisioner resource file
- BZ - 1518501 - Builds failing after new Red Hat jenkins images updated
- BZ - 1519034 - Jenkins-2 with persistent storage breaks when rolling out update using image 67a1ed17c726
- BZ - 1520026 - [3.7] GlusterFS: Add configuration for auto creating block-hosting volumes
- BZ - 1520926 - [3.7] Iptables not getting updated with correct endpoints
- BZ - 1523335 - openshift_env facts overwrite top level keys
CVEs
(none)
References
(none)
Red Hat OpenShift Container Platform 3.7
SRPM | |
---|---|
atomic-openshift-3.7.14-1.git.0.593a50e.el7.src.rpm | SHA-256: aa4ff705de95367c7124b59ae19f173524d6e885838fe0ebd686b3954d551e2d |
cri-o-1.0.6-1.gitf19b368.el7.src.rpm | SHA-256: e2b286c33af92213d3e51416868e83f75ab7cf26bbe90c9ed9c957f05873ac79 |
openshift-ansible-3.7.14-1.git.0.4b35b2d.el7.src.rpm | SHA-256: 0bc146371b73b09f9be834b577ad5cc0d9cfea6a5dcbe3f973117628d502d7a1 |
openshift-elasticsearch-plugin-2.4.4.17__redhat_1-3.el7.src.rpm | SHA-256: 62b21dd920936eafed060fbaf24fb17c2eea99220605ea0d513b69342fca7020 |
origin-kibana-4.5.1-8.el7.src.rpm | SHA-256: 5599199f404b492401b90e61de1d48822621d7d5eab3944fe6d141e2a670b1a5 |
python-clamd-1.0.2-4.el7.src.rpm | SHA-256: 24a727523f2f4cf42c69383231fe704966d31d7d1c9e4f4b1ff7b718c6b18afb |
python-keyczar-0.71c-2.el7aos.src.rpm | SHA-256: eeaccfacea1fb6bc13dc9f74a8e9c50e4bbe68171e3642c08e0aca1e85c738a7 |
python-setuptools-17.1.1-4.el7.src.rpm | SHA-256: 45a4b21b5b1895b4d0c3bd379a4cb19acc9c768a02f6097800fe6d343b9a36ea |
rubygem-fluent-plugin-viaq_data_model-0.0.12-1.el7.src.rpm | SHA-256: 418b11cde02cddf74dea3eab996984a196a933114766d81e234bd7a909c6a435 |
scons-2.5.1-1.el7.src.rpm | SHA-256: 7a515924c804ce6d63a8ffe59d2404f518b68e2be53735d69a67d557c32b979d |
search-guard-2-2.4.4.10_redhat_1-3.el7.src.rpm | SHA-256: a255e5d95edb0abeda2b8658888bbdda0780feeb2604f94052e4d334d11d21bf |
search-guard-ssl-2.4.4.19_redhat_1-1.el7.src.rpm | SHA-256: 1fcaa06c5e5adb36ac18efbcfa228ce4c2e2a93db399db7089ecb8e1bfa20639 |
v8-3.14.5.10-25.el7.src.rpm | SHA-256: 3a2b735ccb42483b1fa39d5aeabf881f388694119616925008aff2d519dc74c4 |
x86_64 | |
atomic-openshift-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: 0462614d30d2b4e181bfd533925074f5314732711438d00f45790c216e394657 |
atomic-openshift-clients-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: 0b754e00801047e0ab1a53021a664c671984b66b31578d9072d9c2dcaf120494 |
atomic-openshift-clients-redistributable-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: 05e8ad27bffd649ac49a85b2adbd99f0dffd19ce090d62341e2d4067f926b7eb |
atomic-openshift-cluster-capacity-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: 7cae43a3f004976575c3d342032815c7b21bb842325d6fec0f389e062e674df9 |
atomic-openshift-docker-excluder-3.7.14-1.git.0.593a50e.el7.noarch.rpm | SHA-256: 29aa44225b0177ab3bc5bca5ca602020b647764909834946cdf86371551f9ef9 |
atomic-openshift-dockerregistry-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: b1066fee23348ec694b255ade7132dde37724a2dd1d5172f3e26c23a584c77c4 |
atomic-openshift-excluder-3.7.14-1.git.0.593a50e.el7.noarch.rpm | SHA-256: 8f824f25fdb1069c04ce3490a25f5117eb0556199ed627ec7a7a470995c5d92e |
atomic-openshift-federation-services-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: fcb80a671b6483dbb75bdce435e3e88af0605ab849941c6d0b4f0c8c6a7aed5c |
atomic-openshift-master-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: a7b8066a526282a5c4b872e39fd50c6406e29c6079376d98804d150fc8c10faf |
atomic-openshift-node-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: 3de1f9fdb9362a07ca4bbad9a30932664a5fbfcb77bf1d15a6e902b9fe5b4826 |
atomic-openshift-pod-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: c9deb028fa6556ff6ece74595b30a4a2a8eaa52427298550f219079ce088e2f6 |
atomic-openshift-sdn-ovs-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: a7fbdd2721bc45e5c604218acf661c0278c8760c2e3c728dbb8db3548d085eac |
atomic-openshift-service-catalog-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: 746f8ffbdc880dc5ea16b15b1a1677abf89c53b3b2d014cf51df33789e4c4b31 |
atomic-openshift-template-service-broker-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: ac33752732d263daf247dc1ee00186c8e727150189b0841d3454425ca20cf449 |
atomic-openshift-tests-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: 23ead86abf686de200f4592d5782e119db91c78983f979e551551c2998e356b2 |
atomic-openshift-utils-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: 685132aa3ebe08bad9fe99616838d18c7850d1d5a5a9ce509a9cb941935a94c3 |
cri-o-1.0.6-1.gitf19b368.el7.x86_64.rpm | SHA-256: 99867517b31e09e1ed0b49031f42816af734c3c81d3672c1655e77ace107d089 |
cri-o-debuginfo-1.0.6-1.gitf19b368.el7.x86_64.rpm | SHA-256: a10265c477566fa45280f2e569fe056a1086f07009c79b44e81cc894a099b8a6 |
openshift-ansible-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: 81d06962c842c730fe488591e4ed7dbe3604b0ad3001a20cf22eea7f4fc71950 |
openshift-ansible-callback-plugins-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: c1d0c15e03e5c0a6d1630848f608ccc2f4417c0993d2457dd587094579078db0 |
openshift-ansible-docs-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: ea7fcfe08f956d5a8e4ede217c949041f5c7ac80468cec6742e7a5e0f1bad041 |
openshift-ansible-filter-plugins-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: 4885c65aa9e42894887564dc350c99ba6d7ef85d4c3c2631e7761c50e7f925d5 |
openshift-ansible-lookup-plugins-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: 72db1d0d4d5b37bf0c500d5ecfdabf94a6e6a9b7aaf780b01dcff6374fe7a71b |
openshift-ansible-playbooks-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: ad2959b1bdcc1df5e03c7400e1e08cbbbec4a8a4e0c6649d40774a2d69909df9 |
openshift-ansible-roles-3.7.14-1.git.0.4b35b2d.el7.noarch.rpm | SHA-256: 9d3dcf0f1a6896cefec89cd6f34b1bc39ef538991570cd331d891c8913af17a6 |
openshift-elasticsearch-plugin-2.4.4.17__redhat_1-3.el7.noarch.rpm | SHA-256: a82c27d03afbd85907af7a94503d573ca26fc9934782679025f46da2a12f841f |
origin-kibana-4.5.1-8.el7.noarch.rpm | SHA-256: 5608f22c2539022d88a3894eb2ce3f6d527eb548d3ffe2032422521c06d4bc82 |
python-keyczar-0.71c-2.el7aos.noarch.rpm | SHA-256: 40dc9a3c299a46c6bc41384449d3185d65061e03c18decdef4fa64ae9aa1c61e |
python-setuptools-17.1.1-4.el7.noarch.rpm | SHA-256: de4152fa64eb27a3834aaf0ad9899ba43feb183904d9bf5d06177ea07f015d6c |
python2-clamd-1.0.2-4.el7.noarch.rpm | SHA-256: aac445e9fd22af877dcc913152207c3f0a5b37c7b687a8961ba214f65fa00bad |
rubygem-fluent-plugin-viaq_data_model-0.0.12-1.el7.noarch.rpm | SHA-256: 1b36bc62d5ab67c84bb991eee7daba86faf9e54bb6084229769aa378495969a9 |
rubygem-fluent-plugin-viaq_data_model-doc-0.0.12-1.el7.noarch.rpm | SHA-256: 5a7fb4aa94b91d1ad6e09519bb8f27da600ce12dcd38f6a72c4ca0f4a6685915 |
scons-2.5.1-1.el7.noarch.rpm | SHA-256: bd3e3a5ac4dc536af4085d79e9231e46541e6f3e7c048c7c14afecdee0256fe0 |
search-guard-2-2.4.4.10_redhat_1-3.el7.noarch.rpm | SHA-256: edd659a6acfaaa1702a66d575a8f3f8916eb9c4f8616ca829db561bf2058c2f2 |
search-guard-ssl-2.4.4.19_redhat_1-1.el7.noarch.rpm | SHA-256: 6bcad99d457ab2cfa6f40c2b0f2c9a06c90eb0b063d0eb7d66cf49426f8e7b6b |
tuned-profiles-atomic-openshift-node-3.7.14-1.git.0.593a50e.el7.x86_64.rpm | SHA-256: de2c0ce3ca31e54b6e8de05e72529fa7568e97e0ce05c099ffc292977e7879b8 |
v8-3.14.5.10-25.el7.x86_64.rpm | SHA-256: 0d342f14d90643e2d232aa9f70b85b35c27a4cc1f3a0dbed53b773da0a771e98 |
v8-debuginfo-3.14.5.10-25.el7.x86_64.rpm | SHA-256: 8fb2c1c819632e28282cd7535383e794ddc032e8e72b1ce4a703e02841439e2d |
v8-devel-3.14.5.10-25.el7.x86_64.rpm | SHA-256: 60a46cd6005e140d82cdee6fb0c561303d3fe9f4c1c56336abf18e6878abeb87 |
v8-python-3.14.5.10-25.el7.x86_64.rpm | SHA-256: 875d29db202ff403d7eeacdf34a4bf096142b68ac25912d429d1f86e765dbea0 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.