RHBA-2020:0156 - Bug Fix Advisory

Topic

An updated devtools/rust-toolset-rhel7 container image is now available in the Red Hat Container Registry.

Description

The devtools/rust-toolset-rhel7 container image provides Rust Toolset, a compiler toolset for building applications using the Rust programming language.

The devtools/rust-toolset-rhel7 container image has been updated to provide fixes for CVE-2019-11729 and CVE-2019-11745.

To pull the devtools/rust-toolset-rhel7 image, run the following command as root:

docker pull registry.access.redhat.com/devtools/rust-toolset-rhel7

For details, see Using Rust Toolset linked from the References section.

Solution

The container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com using the "podman pull" command.

Affected Products

• Red Hat Developer Tools (for RHEL Server) 1 x86_64
• Red Hat Developer Tools (for RHEL Server for System Z) 1 s390x
• Red Hat Developer Tools (for RHEL Server for IBM Power LE) 1 ppc64le

Fixes

• BZ - 1785243 - rebuild of rust-toolset-container 2019.4

CVEs

• CVE-2019-11729
• CVE-2019-11745

References

• https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_rust_1.37_toolset/
• https://access.redhat.com/containers/