Synopsis

OpenShift Container Platform 3.7 bug fix update

Type/Severity

Bug Fix Advisory

Topic

An update is now available for Red Hat OpenShift Container Platform 3.7.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains RPM packages for this release. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:1262

This update fixes the following bug:

• The original build of atomic-openshift-3.7.44 was built using Golang 1.9, which has tighter certificate validation requirements than previous versions. In environments upgraded from OpenShift Container Platform 3.5 to later versions, certificates may not pass those validation requirements. With this bug fix, atomic-openshift-3.7.44 has been rebuilt using Golang 1.8.3, which does not have the more restrictive validation rules, which avoids this problem. (BZ#1565762)
  

All OpenShift Container Platform 3.7 users are advised to upgrade to these updated packages and images.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For OpenShift Container Platform 3.7 see the following documentation for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:

https://docs.openshift.com/container-platform/3.7/release_notes/ocp_3_7_release_notes.html

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Affected Products

• Red Hat OpenShift Container Platform 3.7 x86_64

Fixes

• BZ - 1565762 - Need to validate etcd server certs have proper SAN prior to upgrading to atomic-openshift-3.7.44

CVEs

(none)

References

(none)

Red Hat OpenShift Container Platform 3.7

SRPM
atomic-openshift-3.7.44-2.git.0.6b061d4.el7.src.rpm	SHA-256: dbb4a99f35eb6a146a3a8a6772fab796563ff38983f98e9bdeef3684e8f549be
x86_64
atomic-openshift-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: c34c9261a89b78ac9c30bcb74378ca2f7b01a6dd2f005b5abf242ab6b90698df
atomic-openshift-clients-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 8eec4e318e8e9cd46d8a1de0c35f9c37b1277c68b7e846c65d78612e048dfeeb
atomic-openshift-clients-redistributable-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 6a62113ff7543feaae6505ad6069cdb37c14920e75c77e8ab9492b21be9e802d
atomic-openshift-cluster-capacity-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: cd14491cfdea78621ebb3cde57156195c696af8cdf91d3bbad20112d6b35d36d
atomic-openshift-docker-excluder-3.7.44-2.git.0.6b061d4.el7.noarch.rpm	SHA-256: 3cc8c618312bb99161416e692b31eda121211da18a833446a77d3189709c156e
atomic-openshift-dockerregistry-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 22a71817e18f00f11fdac56e3ad17bc5972b644aaeb80f8ef924751fc66500fd
atomic-openshift-excluder-3.7.44-2.git.0.6b061d4.el7.noarch.rpm	SHA-256: 7c6d876ff18e0b9fcab4bdd07a780fb9c8b0c05749f4d113967ad3f6ab9f5a96
atomic-openshift-federation-services-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: fea6cb133f31a718c87c80118a9f9d1ff0fd9db55dad42d0a9086e0611eeb778
atomic-openshift-master-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 9b6a1e209fd6e0f733df57bf83e2ad26d288b48e1d833e17a3c4f959282908fc
atomic-openshift-node-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 6fba7dd2f304d8781fb55beef9759edb1151d6326404dfd086cbb6de098ced96
atomic-openshift-pod-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 94d7efa3c1b0cf791f706b0272015727ae33aac3f4665fb48edf56ebcb0e6a51
atomic-openshift-sdn-ovs-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: dae525717522aaecc3f0347dea30381ef764552677319f066d22dcf24e24f634
atomic-openshift-service-catalog-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 7ea080e3679a09a40eceeb5a687c916d52637bcf2929e5c94a241afb561aa27f
atomic-openshift-template-service-broker-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 2f4521a573e980f873279f6ce601f7960edc6a43353b53ebc13ac1a83c39f1cc
atomic-openshift-tests-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 6e43f1586a7cf36aec009e10e0fe9c46b5699b6d7d32c1c08e4e764423d21ed8
tuned-profiles-atomic-openshift-node-3.7.44-2.git.0.6b061d4.el7.x86_64.rpm	SHA-256: 413383f919979a141b7f74c41c06b5419d24637d56f2fc4baad57cffea7ef748