RHBA-2022:0107 - Bug Fix Advisory

Topic

Updated Red Hat Software Collections container images are now available in the Red Hat Container Registry.

Description

Red Hat Software Collections container images are based on the corresponding collection and the rhel7 or the ubi7 base image.

The rhel7 and ubi7 base images have been updated to the latest version.

This update includes the following images:

rhscl/httpd-24-rhel7
rhscl/mariadb-103-rhel7
rhscl/mariadb-105-rhel7
rhscl/mysql-80-rhel7
rhscl/perl-530-rhel7
rhscl/postgresql-10-rhel7
rhscl/postgresql-12-rhel7
rhscl/postgresql-13-rhel7
rhscl/redis-5-rhel7
rhscl/redis-6-rhel7
ubi7/nginx-118
ubi7/nginx-120
ubi7/nodejs-12
ubi7/nodejs-14
ubi7/php-73
ubi7/python-27
ubi7/python-38
ubi7/ruby-26
ubi7/ruby-27
ubi7/ruby-30
ubi7/s2i-base
ubi7/s2i-core

To pull a container image, run the following command as root:

podman pull registry.access.redhat.com/<image_name>

For details regarding usage of the images, see Using Red Hat Software Collections Container Images linked from the References section.

All users of the Red Hat Software Collections container images are advised to pull these updated images from the Red Hat Container Registry.

Solution

The container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com using the "podman pull" command.

Affected Products

• Red Hat Software Collections (for RHEL Server) 1 for RHEL 7 x86_64
• Red Hat Software Collections (for RHEL Server for System Z) 1 for RHEL 7 s390x
• Red Hat Software Collections (for RHEL Server for IBM Power LE) 1 for RHEL 7 ppc64le

Fixes

• BZ - 2038107 - Rebase ubi7/nodejs-12 container image: rebuild for latest ubi7:7.9

CVEs

• CVE-2020-25704
• CVE-2020-36322
• CVE-2021-3677
• CVE-2021-3712
• CVE-2021-23214
• CVE-2021-23222
• CVE-2021-42739

References

• https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/using_red_hat_software_collections_container_images/
• https://access.redhat.com/documentation/en-us/red_hat_software_collections/2/html/using_red_hat_software_collections_container_images/
• https://access.redhat.com/containers