RHBA-2022:7843 - Bug Fix Advisory

Topic

New and updated Application Stream container images are now available in the Red Hat Container Registry.

Description

Red Hat Enterprise Linux 8 Application Stream container images are based on the corresponding Application Stream component and the ubi8 base image.

The ubi8 base image has been updated to the latest version. The Application Stream container images have been updated to provide enhancements and bug fixes from the RHEL 8.7 release.

This update introduces the following new images:

ubi8/ruby-31
ubi8/nodejs-18
ubi8/nodejs-18-minimal

The following Application Stream container images have been updated:

ubi8/httpd-24
rhel8/mariadb-103
rhel8/mariadb-105
rhel8/mysql-80
ubi8/nginx-118
ubi8/nginx-120
ubi8/nodejs-14
ubi8/nodejs-14-minimal
ubi8/nodejs-16
ubi8/nodejs-16-minimal
ubi8/perl-526
ubi8/perl-530
ubi8/perl-532
ubi8/php-74
ubi8/php-80
rhel8/postgresql-10
rhel8/postgresql-12
rhel8/postgresql-13
ubi8/python-27
ubi8/python-36
ubi8/python-38
ubi8/python-39
rhel8/redis-6
ubi8/ruby-25
ubi8/ruby-27
ubi8/ruby-30
ubi8/s2i-base
ubi8/s2i-core
rhel8/varnish-6

To pull a container image, run the following command as root:

podman pull registry.redhat.io/<image_name>

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

Solution

The container images provided by this update can be downloaded from the Red
Hat Container Registry at registry.redhat.io using the "podman pull"
command.

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Fixes

• BZ - 2092356 - ubi8/php-80 Image doesn't work as expected. [rhel-8]
• BZ - 2108724 - rebuild of nodejs-18-minimal-container 8.7
• BZ - 2108733 - rebuild of nodejs-16-minimal-container 8.7
• BZ - 2108738 - rebuild of nodejs-14-minimal-container 8.7
• BZ - 2108741 - rebuild of s2i-core-container 8.7
• BZ - 2108765 - rebuild of varnish-6-container 8.7
• BZ - 2108944 - rebuild of httpd-24-container 8.7
• BZ - 2108953 - rebuild of mariadb-103-container 8.7
• BZ - 2108957 - rebuild of mariadb-105-container 8.7
• BZ - 2108959 - rebuild of mysql-80-container 8.7
• BZ - 2108961 - rebuild of nginx-118-container 8.7
• BZ - 2108962 - rebuild of nginx-120-container 8.7
• BZ - 2108981 - rebuild of nodejs-14-container 8.7
• BZ - 2108986 - rebuild of nodejs-16-container 8.7
• BZ - 2108988 - rebuild of nodejs-18-container 8.7
• BZ - 2108992 - rebuild of postgresql-10-container 8.7
• BZ - 2108995 - rebuild of postgresql-12-container 8.7
• BZ - 2108996 - rebuild of postgresql-13-container 8.7
• BZ - 2108999 - rebuild of redis-6-container 8.7
• BZ - 2109015 - rebuild of s2i-base-container 8.7
• BZ - 2109041 - rebuild of perl-526-container 8.7
• BZ - 2109044 - rebuild of perl-530-container 8.7
• BZ - 2109049 - rebuild of perl-532-container 8.7
• BZ - 2109053 - rebuild of php-74-container 8.7
• BZ - 2109057 - rebuild of python-27-container 8.7
• BZ - 2109070 - rebuild of python-36-container 8.7
• BZ - 2109084 - rebuild of ruby-30-container 8.7
• BZ - 2109085 - rebuild of python-38-container 8.7
• BZ - 2109086 - rebuild of ruby-25-container 8.7
• BZ - 2109087 - rebuild of ruby-31-container 8.7
• BZ - 2109088 - rebuild of ruby-27-container 8.7
• BZ - 2109089 - rebuild of python-39-container 8.7

CVEs

• CVE-2016-3709
• CVE-2020-36516
• CVE-2020-36558
• CVE-2021-3640
• CVE-2021-22570
• CVE-2021-30002
• CVE-2022-0168
• CVE-2022-0561
• CVE-2022-0562
• CVE-2022-0617
• CVE-2022-0854
• CVE-2022-0865
• CVE-2022-0891
• CVE-2022-0908
• CVE-2022-0909
• CVE-2022-0924
• CVE-2022-1016
• CVE-2022-1048
• CVE-2022-1055
• CVE-2022-1184
• CVE-2022-1304
• CVE-2022-1355
• CVE-2022-1852
• CVE-2022-2078
• CVE-2022-2586
• CVE-2022-2639
• CVE-2022-2938
• CVE-2022-20368
• CVE-2022-21499
• CVE-2022-22624
• CVE-2022-22628
• CVE-2022-22629
• CVE-2022-22662
• CVE-2022-22844
• CVE-2022-23960
• CVE-2022-24448
• CVE-2022-24795
• CVE-2022-25255
• CVE-2022-26373
• CVE-2022-26700
• CVE-2022-26709
• CVE-2022-26710
• CVE-2022-26716
• CVE-2022-26717
• CVE-2022-26719
• CVE-2022-27404
• CVE-2022-27405
• CVE-2022-27406
• CVE-2022-27950
• CVE-2022-28390
• CVE-2022-28893
• CVE-2022-29581
• CVE-2022-30293
• CVE-2022-36946
• CVE-2022-37434

References

• https://catalog.redhat.com/
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/