RHBA-2019:2961 - Bug Fix Advisory

Topic

An updated devtools/go-toolset-rhel7 container image is now available in the Red Hat Container Registry.

Description

The devtools/go-toolset-rhel7 container image provides Go Toolset, a compiler toolset for building applications using the Go language and compiler suite. It is based on the ubi7 base image.

The ubi7 base image has been updated to the latest version. This update includes the devtools/go-toolset-rhel7 container image.

To pull the devtools/go-toolset-rhel7 image, run the following command as root:

podman pull registry.access.redhat.com/devtools/go-toolset-rhel7

For details, see Using Go Toolset linked from the References section.

Solution

The container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com using the "podman pull" command.

Affected Products

• Red Hat Developer Tools (for RHEL Server) 1 x86_64
• Red Hat Developer Tools (for RHEL Server for System Z) 1 s390x
• Red Hat Developer Tools (for RHEL Server for IBM Power LE) 1 ppc64le

Fixes

• BZ - 1701224 - CVE-2019-9500 kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results
• BZ - 1724389 - CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability

CVEs

• CVE-2019-1125
• CVE-2019-9500
• CVE-2019-9512
• CVE-2019-9514

References

• https://access.redhat.com/containers/
• https://access.redhat.com/documentation/en-us/red_hat_developer_tools/2019.3/html-single/using_go_toolset/index