RHBA-2017:3000 - Bug Fix Advisory

Topic

Updated Red Hat Software Collections container images are now available in the Red Hat Container Registry.

Description

Red Hat Software Collections container images are based on the corresponding collection and the rhel7:7.4 base image.

The base image has been updated to the latest rhel7:7.4 version.

This update includes the following images:

rhscl/devtoolset-4-perftools-rhel7:4-12.19 (BZ#1501068)
rhscl/devtoolset-4-toolchain-rhel7:4-10.23 (BZ#1501067)
rhscl/devtoolset-6-perftools-rhel7:6-8.10 (BZ#1501070)
rhscl/devtoolset-6-toolchain-rhel7:6-7.10 (BZ#1501069)
rhscl/httpd-24-rhel7:2.4-36.10 (BZ#1501102)
rhscl/mariadb-100-rhel7:10.0-13.24 (BZ#1501083)
rhscl/mariadb-101-rhel7:10.1-3.22 (BZ#1501084)
rhscl/mongodb-26-rhel7:2.6-8.28 (BZ#1501081)
rhscl/mongodb-32-rhel7:3.2-5.20 (BZ#1501082)
rhscl/mysql-56-rhel7:5.6-13.23 (BZ#1501072)
rhscl/mysql-57-rhel7:5.7-3.16 (BZ#1501073)
rhscl/nginx-110-rhel7:1.10-2.10 (BZ#1501099)
rhscl/nginx-18-rhel7:1.8-13.21 (BZ#1501097)
rhscl/nodejs-4-rhel7:4-11.25 (BZ#1481808, BZ#1501100)
rhscl/nodejs-6-rhel7:6-14.11 (BZ#1501101)
rhscl/passenger-40-rhel7:4.0-33.27 (BZ#1501095)
rhscl/perl-520-rhel7:5.20-12.27 (BZ#1501090)
rhscl/perl-524-rhel7:5.24-3.17 (BZ#1501091)
rhscl/php-56-rhel7:5.6-16.17 (BZ#1501085)
rhscl/php-70-rhel7:7.0-5.17 (BZ#1501086)
rhscl/postgresql-94-rhel7:9.4-6.24 (BZ#1501074)
rhscl/postgresql-95-rhel7:9.5-6.20 (BZ#1501075)
rhscl/python-27-rhel7:2.7-18.12 (BZ#1501087)
rhscl/python-34-rhel7:3.4-13.26 (BZ#1501088)
rhscl/python-35-rhel7:3.5-18.17 (BZ#1501089)
rhscl/redis-32-rhel7:3.2-5.14 (BZ#1501071)
rhscl/ror-41-rhel7:4.1-13.24 (BZ#1501076)
rhscl/ror-42-rhel7:4.2-3.21 (BZ#1501077)
rhscl/ror-50-rhel7:5.0-2.10 (BZ#1501078)
rhscl/ruby-22-rhel7:2.2-12.25 (BZ#1501092)
rhscl/ruby-23-rhel7:2.3-6.17 (BZ#1501093)
rhscl/ruby-24-rhel7:2.4-2.11 (BZ#1501094)
rhscl/s2i-base-rhel7:1-6.25 (BZ#1501080)
rhscl/s2i-core-rhel7:1-1.3 (BZ#1501066)
rhscl/thermostat-16-agent-rhel7:1.6-17.14 (BZ#1501103)
rhscl/thermostat-16-storage-rhel7:1.6-16.13 (BZ#1501079)
rhscl/varnish-4-rhel7:4-12.24 (BZ#1501096)

To pull a rhscl/<image_name> image, run the following command as root:

docker pull registry.access.redhat.com/rhscl/<image_name>

For details regarding usage of the container images, see Using Red Hat Software Collections Container Images linked from the References section.

All users of the Red Hat Software Collections container images are advised to pull these updated images from the Red Hat Container Registry.

Solution

The container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com using the "docker pull" command.

Affected Products

• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64

Fixes

• BZ - 1481808 - The nodejs-4-rhel7 base image violates the certified container rpm_verify_successful test

CVEs

• CVE-2016-5483
• CVE-2016-8327
• CVE-2017-11499
• CVE-2017-3238
• CVE-2017-3244
• CVE-2017-3251
• CVE-2017-3256
• CVE-2017-3257
• CVE-2017-3258
• CVE-2017-3265
• CVE-2017-3273
• CVE-2017-3291
• CVE-2017-3302
• CVE-2017-3305
• CVE-2017-3308
• CVE-2017-3309
• CVE-2017-3312
• CVE-2017-3313
• CVE-2017-3317
• CVE-2017-3318
• CVE-2017-3319
• CVE-2017-3320
• CVE-2017-3331
• CVE-2017-3450
• CVE-2017-3452
• CVE-2017-3453
• CVE-2017-3454
• CVE-2017-3455
• CVE-2017-3456
• CVE-2017-3457
• CVE-2017-3458
• CVE-2017-3459
• CVE-2017-3460
• CVE-2017-3461
• CVE-2017-3462
• CVE-2017-3463
• CVE-2017-3464
• CVE-2017-3465
• CVE-2017-3467
• CVE-2017-3468
• CVE-2017-3529
• CVE-2017-3599
• CVE-2017-3600
• CVE-2017-3633
• CVE-2017-3634
• CVE-2017-3636
• CVE-2017-3637
• CVE-2017-3638
• CVE-2017-3639
• CVE-2017-3640
• CVE-2017-3641
• CVE-2017-3642
• CVE-2017-3643
• CVE-2017-3644
• CVE-2017-3645
• CVE-2017-3646
• CVE-2017-3647
• CVE-2017-3648
• CVE-2017-3649
• CVE-2017-3650
• CVE-2017-3651
• CVE-2017-3652
• CVE-2017-3653
• CVE-2017-7546
• CVE-2017-7547
• CVE-2017-7548

References

• https://access.redhat.com/documentation/en-us/red_hat_software_collections/2/html/using_red_hat_software_collections_container_images/