RHBA-2019:2888 - Bug Fix Advisory

Topic

Updated Red Hat CodeReady Workspaces container images are now available in the Red Hat Container Registry.

Description

Red Hat CodeReady Workspaces 1.2.3 provides a cloud-developer-workspace server and a browser-based IDE built for teams and organizations. CodeReady Workspaces runs in OpenShift and is well-suited for container-based development.

This update is based on an updated Red Hat Enterprise Linux base image that addresses the RHSA-2019:2827 security vulnerability. This update includes the following updated container images:

codeready-workspaces-stacks-cpp-rhel8-container-1.2-14.1568963406
codeready-workspaces-stacks-golang-rhel8-container-1.2-16.1568963408

All users of the Red Hat CodeReady Workspaces container images are advised to pull these updated images from the Red Hat Container Registry.

Solution

The container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available on the pages of the respective images in the Red Hat Container Catalog as listed in the References section.

Dockerfiles and scripts should be amended either to refer to this new image specifically or to the latest image generally.

Affected Products

• Red Hat Developer Tools (for RHEL Server) 1 x86_64

Fixes

• BZ - 1750727 - CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration

CVEs

• CVE-2018-20969
• CVE-2019-13638
• CVE-2019-14835

References

• https://access.redhat.com/containers/#/product/5bace840bed8bd6ee81a91c4