- Issued:
- 2022-08-10
- Updated:
- 2022-08-10
RHBA-2022:6031 - Bug Fix Advisory
Synopsis
updated integration/service-registry-rhel8-operator-metadata container image
Type/Severity
Bug Fix Advisory
Topic
Updated integration/service-registry-rhel8-operator-metadata container image is now available for RHEL 8-based Middleware Containers.
Description
The integration/service-registry-rhel8-operator-metadata container image has
been updated for RHEL 8-based Middleware Containers to address the following
security advisory: RHBA-2022:5712 (see References)
Users of integration/service-registry-rhel8-operator-metadata container images
are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs, and add these enhancements.
Users of these images are also encouraged to rebuild all container images that
depend on these images.
You can find images updated by this advisory in Red Hat Container Catalog (see
References).
Solution
You can download the RHEL 8-based Middleware Containers image provided by this update from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are
available from the Red Hat Container Catalog (see References).
You must update Dockerfiles and scripts either to refer to this new image
specifically, or to the latest image generally.
Affected Products
- Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
- Red Hat OpenShift Container Platform 4.6 for RHEL 8 x86_64
Fixes
- BZ - 2108540 - CVE-2022-21540 OpenJDK: class compilation issue (Hotspot, 8281859)
- BZ - 2108543 - CVE-2022-21541 OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866)
- BZ - 2108554 - CVE-2022-34169 OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)
CVEs
(none)
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
