Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Red Hat OpenShift 3.3 RHSA-2016-2696-01 Moderate Network Issue
red hat
November 15, 2016
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.3
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
See the OpenShift Container Platform 3.3 documentation, which will be
updated shortly for release 3.3.1.4, for important instructions on how to
upgrade your cluster and fully apply this asynchronous errata update:
ease_notes.html
This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258.
Summary
Red Hat OpenShift Container Platform is the company's cloud computing
Platform-as-a-Service (PaaS) solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container
Platform release 3.3.1.4. See the following advisory for the container
images for this release:
https://access.redhat.com/errata/RHBA-2016:2697
Security Fix(es):
* The OpenShift Container Platform 3 router does not properly sort routes
when processing newly added routes. An attacker with access to create
routes can potentially overwrite existing routes and redirect network
traffic for other users to their own site. (CVE-2016-8631)
This issue was discovered by Jordan Liggitt (Red Hat).
All OpenShift Container Platform 3 users are advised to upgrade to these
updated packages and images.
Topics Covered
References
https://access.redhat.com/security/cve/CVE-2016-8631 https://access.redhat.com/security/updates/classification/#moderate
Package List
Red Hat OpenShift Container Platform 3.3:
Source:
atomic-openshift-3.3.1.4-1.git.0.7c8657c.el7.src.rpm
x86_64:
atomic-openshift-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-clients-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-clients-redistributable-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-dockerregistry-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-master-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-node-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-pod-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-sdn-ovs-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
atomic-openshift-tests-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
tuned-profiles-atomic-openshift-node-3.3.1.4-1.git.0.7c8657c.el7.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
PREVIOUS
NEXT
Advisory ID: RHSA-2016:2696-01
Product: Red Hat OpenShift Enterprise
Advisory URL: https://access.redhat.com/errata/RHSA-2016:2696
Issue date: 2016-11-15
Topic
An update for atomic-openshift is now available for Red Hat OpenShiftContainer Platform 3.3.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.
Topics Covered
Relevant Releases Architectures
Red Hat OpenShift Container Platform 3.3 - x86_64
Bugs Fixed
1390735 - CVE-2016-8631 OSE 3: Router sometimes selects new routes over old routes when determining claimed hostnames
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!