Red Hat Security Advisory: Red Hat OpenShift Enterprise 3.2 security, bug fix, and enhancement update
Red Hat OpenShift Enterprise 3.2 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-3711US | low3.3 | — | ||
HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cooki… | ||||
| CVE-2016-2160US | high8.8 | — | ||
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder imag… | ||||
| CVE-2016-2149US | medium6.5 | — | ||
Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2016:1064self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1252520external
- 1264500external
- 1273149external
- 1276038external
- 1278719external
- 1278974external
remediations (28)
- Fixedatomic-openshift-0:3.2.0.20-1.git.0.f44746c.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-0:3.2.0.20-1.git.0.f44746c.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-clients-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-clients-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-clients-redistributable-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-clients-redistributable-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-dockerregistry-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-dockerregistry-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-master-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-master-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-node-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-node-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-pod-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-pod-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-recycle-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-recycle-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-sdn-ovs-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-sdn-ovs-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-tests-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedatomic-openshift-tests-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixednodejs-openshift-auth-proxy-0:0.0.20-1.el7aos.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixednodejs-openshift-auth-proxy-0:0.0.20-1.el7aos.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixednodejs-proxy-addr-0:1.0.8-2.el7aos.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixednodejs-proxy-addr-0:1.0.8-2.el7aos.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedtuned-profiles-atomic-openshift-node-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064 - Fixedtuned-profiles-atomic-openshift-node-0:3.2.0.20-1.git.0.f44746c.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, see: https://access.redhat.com/articles/11258 For instructions on new installations, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/install/ For instructions on how to properly upgrade your OpenShift Enterprise cluster from release 3.1 to release 3.2, see the following documentation: https://docs.openshift.com/enterprise/3.2/install_config/upgrading/ For more information about OpenShift Enterprise, see the full documentation: https://docs.openshift.com/enterprise/3.2
https://access.redhat.com/errata/RHSA-2016:1064
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan