Synopsis

Critical: OpenShift Container Platform 3.1 security update

Type/Severity

Security Advisory: Critical

Topic

An update is now available for Red Hat OpenShift Container Platform 3.1.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments.

This advisory contains RPM packages for this release. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHBA-2018:1242

Security Fix(es):

• source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go (CVE-2018-1102)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenShift Container Platform 3.1 x86_64

Fixes

• BZ - 1562246 - CVE-2018-1102 source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go
• BZ - 1570157 - Placeholder for OCP 3.1.z

CVEs

• CVE-2018-1102

References

• https://access.redhat.com/security/updates/classification/#critical

Red Hat OpenShift Container Platform 3.1

SRPM
atomic-openshift-3.1.1.11-4.git.3.12809c8.el7.src.rpm	SHA-256: 6e75161e851e502cec90f77ec305ba73fba2602a38228163eb06681fec12bd7e
x86_64
atomic-openshift-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: fe47e58da6f50c06d5f0b5d0eb225d5a467b71525a5965c330ff2c40615f301c
atomic-openshift-clients-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: 94195ccff8a599bc628318f982c43670c4643fb6996484e4ffad43b6e315ba17
atomic-openshift-clients-redistributable-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: 026f4c113334dd08a6bd00b657eba30cf7fbc3ed1c67621312dd966833e87062
atomic-openshift-docker-excluder-3.1.1.11-4.git.3.12809c8.el7.noarch.rpm	SHA-256: ac3bb6ba18988ed34bfec702f10e513e972c7b0cc980fc8fde80b3d17c1fa4fa
atomic-openshift-dockerregistry-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: 15f621bc4dca031b5cf12bb55260240688d67356b23b6d7340368d7bacad7838
atomic-openshift-excluder-3.1.1.11-4.git.3.12809c8.el7.noarch.rpm	SHA-256: 02cd22488a62a4bd24f5449d792570af81ddd063689f5508de382584dfde8898
atomic-openshift-master-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: c0b8ff1071cf2902d185da61f70cd64009783ce863b86b6be3a389a6ce8fdc6a
atomic-openshift-node-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: 1d2f71fc0e8f0a29c0b1d27351a6feb532cf5201de3936c38bb8c7ee144eb623
atomic-openshift-pod-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: 6e13bef7c3e59b3a5e1e435062eedd8a336e867a925c8361e76d4bb879dbfa71
atomic-openshift-recycle-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: ada2f04432155fbb579b9c04626dc2a3965e03c5ff923ff33d87cbced580e964
atomic-openshift-sdn-ovs-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: 9c9a707792743bbb5b0b628c4cf5381c2c96efc6702683656ca60b6e2186384b
tuned-profiles-atomic-openshift-node-3.1.1.11-4.git.3.12809c8.el7.x86_64.rpm	SHA-256: bd54935f1400144455356729eb4dcc8aa86541b092fda82ea4eff60d5c42e87c