RHBA-2018:1228 - Bug Fix Advisory

Topic

An update is now available for Red Hat OpenShift Container Platform 3.8.

Description

Red Hat OpenShift Container Platform is the company's cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or private
cloud deployments.

This advisory contains the container images for this release. See the
following advisory for the RPM packages and full list of security fixes for
this release:

https://access.redhat.com/errata/RHSA-2018:1229

This update contains the following images:

openshift3/apb-base:v3.8.37-3
openshift3/container-engine:v3.8.37-3
openshift3/cri-o:v3.8.37-4
openshift3/jenkins-2-rhel7:v3.8.37-2
openshift3/local-storage-provisioner:v3.8.37-3
openshift3/logging-auth-proxy:v3.8.37-2
openshift3/logging-curator:v3.8.37-3
openshift3/logging-eventrouter:v3.8.37-4
openshift3/logging-fluentd:v3.8.37-4
openshift3/logging-kibana:v3.8.37-3
openshift3/mariadb-apb:v3.8.37-2
openshift3/mediawiki-123:v3.8.37-4
openshift3/mediawiki-apb:v3.8.37-3
openshift3/metrics-cassandra:v3.8.37-4
openshift3/metrics-hawkular-metrics:v3.8.37-4
openshift3/metrics-hawkular-openshift-agent:v3.8.37-3
openshift3/metrics-heapster:v3.8.37-3
openshift3/mysql-apb:v3.8.37-3
openshift3/node:v3.8.37-2
openshift3/oauth-proxy:v3.8.37-3
openshift3/openvswitch:v3.8.37-2
openshift3/ose-ansible-service-broker:v3.8.37-3
openshift3/ose-ansible:v3.8.37-3
openshift3/ose-cluster-capacity:v3.8.37-3
openshift3/ose-deployer:v3.8.37-2
openshift3/ose-docker-builder:v3.8.37-2
openshift3/ose-docker-registry:v3.8.37-2
openshift3/ose-egress-http-proxy:v3.8.37-3
openshift3/ose-egress-router:v3.8.37-2
openshift3/ose-f5-router:v3.8.37-2
openshift3/ose-federation:v3.8.37-3
openshift3/ose-haproxy-router:v3.8.37-2
openshift3/ose-keepalived-ipfailover:v3.8.37-3
openshift3/ose-pod:v3.8.37-3
openshift3/ose-recycler:v3.8.37-2
openshift3/ose-service-catalog:v3.8.37-3
openshift3/ose-sti-builder:v3.8.37-2
openshift3/ose-template-service-broker:v3.8.37-3
openshift3/ose:v3.8.37-4
openshift3/postgresql-apb:v3.8.37-3
openshift3/prometheus-alert-buffer:v3.8.37-3
openshift3/prometheus-alertmanager:v3.8.37-3
openshift3/prometheus:v3.8.37-4
openshift3/registry-console:v3.8.37-3
openshift3/snapshot-controller:v3.8.37-3
openshift3/snapshot-provisioner:v3.8.37-3

All OpenShift Container Platform 3.8 users are advised to upgrade to these
updated images.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 3.8 x86_64

Fixes

• BZ - 1571455 - OpenShift Container Platform 3.8.z image refresh

CVEs

• CVE-2014-9402
• CVE-2015-5180
• CVE-2016-3672
• CVE-2016-7913
• CVE-2016-8633
• CVE-2017-3736
• CVE-2017-3737
• CVE-2017-3738
• CVE-2017-7294
• CVE-2017-8824
• CVE-2017-9725
• CVE-2017-11671
• CVE-2017-12132
• CVE-2017-12154
• CVE-2017-12190
• CVE-2017-13166
• CVE-2017-14140
• CVE-2017-15116
• CVE-2017-15121
• CVE-2017-15126
• CVE-2017-15127
• CVE-2017-15129
• CVE-2017-15137
• CVE-2017-15138
• CVE-2017-15265
• CVE-2017-15670
• CVE-2017-15804
• CVE-2017-15906
• CVE-2017-17448
• CVE-2017-17449
• CVE-2017-17558
• CVE-2017-18017
• CVE-2017-18203
• CVE-2017-1000252
• CVE-2017-1000407
• CVE-2017-1000410
• CVE-2018-1063
• CVE-2018-1102
• CVE-2018-2790
• CVE-2018-2794
• CVE-2018-2795
• CVE-2018-2796
• CVE-2018-2797
• CVE-2018-2798
• CVE-2018-2799
• CVE-2018-2800
• CVE-2018-2814
• CVE-2018-2815
• CVE-2018-5146
• CVE-2018-5750
• CVE-2018-6927
• CVE-2018-8088
• CVE-2018-1000001
• CVE-2018-1000004
• CVE-2018-1000156

References

(none)