Synopsis

Critical: OpenShift Container Platform 3.2 security update

Type/Severity

Security Advisory: Critical

Topic

An update is now available for Red Hat OpenShift Container Platform 3.2.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains RPM packages for this release. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:1240

Security Fix(es):

• source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go (CVE-2018-1102)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 3.2 x86_64

Fixes

• BZ - 1562246 - CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go
• BZ - 1570144 - Placeholder for OCP 3.2.z

CVEs

• CVE-2018-1102

References

• https://access.redhat.com/security/updates/classification/#critical

Red Hat OpenShift Container Platform 3.2

SRPM
atomic-openshift-3.2.1.34-2.git.3.aad33c3.el7.src.rpm	SHA-256: 64535e03014a48f53f7edfaf9fd3522222ec5d4809757efc3b0731661d337e03
x86_64
atomic-openshift-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: b738b0a8a305fd51deb99c0f60daf132f8fadfee699c042b6c8e21f9dcbc1d64
atomic-openshift-clients-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: 92a6bfac0a72df800887208136fe6382bd9185e61ba765b24ccfc31f88007b36
atomic-openshift-clients-redistributable-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: e3fd5628035104160be5c0d860186959300fd4256c7698810ed480171b39a212
atomic-openshift-docker-excluder-3.2.1.34-2.git.3.aad33c3.el7.noarch.rpm	SHA-256: 155d5b51d667ee22804a060d9cfb54b368a89449749144c1b86983be011f5be7
atomic-openshift-dockerregistry-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: cb12b6c81dcaeb8295a66d0e17b8ee2e6e08ae7cfc492ea4b2ba3328b3765de8
atomic-openshift-excluder-3.2.1.34-2.git.3.aad33c3.el7.noarch.rpm	SHA-256: f02d8a884d06c22272ec9c5e0ece7718bfb68c49a2d4a20092a4fb82ee59a6be
atomic-openshift-master-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: 980b46088d6dbbf73b5f5055d96bbe92c09074658ef162ed2387db82749ad69c
atomic-openshift-node-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: b4b370ec68addb19655be9d0567faa8fe0e346c0a23ada0a4bf77a097cd25458
atomic-openshift-pod-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: f2f536098d1c60169647d5ab58deb5edb26f9b85406579be09b30cef0698629a
atomic-openshift-recycle-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: 5bae8ff204d894058196d5304af17504cc6b7b943923087b6ac735c05c79df6b
atomic-openshift-sdn-ovs-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: e83b9c6916fcfcc4f1c7b8995d6e9c4d574b9dec4a546c9d9d593c14ced1135a
atomic-openshift-tests-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: 8789cd458565a92046cecdc80b5de4d885b91129c9c14f948061708029c19386
tuned-profiles-atomic-openshift-node-3.2.1.34-2.git.3.aad33c3.el7.x86_64.rpm	SHA-256: 127d551af4bdefad2c0c9629a6a9e4dfee3ea7a8519d154f04296b4c0e2b90f4