RHBA-2023:6753 - Bug Fix Advisory

Topic

Updated Application Stream container images are now available in the Red Hat container registry.

Description

Red Hat Enterprise Linux 9 Application Stream container images are based on the corresponding Application Stream component and the ubi9 or rhel9 base image.

The rhel9 and ubi9 base images have been updated to the latest version.

This update includes the following images:

rhel9/httpd-24
rhel9/mariadb-105
rhel9/mysql-80
rhel9/postgresql-13
rhel9/postgresql-15
rhel9/redis-6
rhel9/redis-7
rhel9/varnish-6
ubi9/nginx-120
ubi9/nginx-122
ubi9/nodejs-16
ubi9/nodejs-16-minimal
ubi9/nodejs-18
ubi9/nodejs-18-minimal
ubi9/nodejs-20
ubi9/nodejs-20-minimal
ubi9/perl-532
ubi9/php-80
ubi9/php-81
ubi9/python-39
ubi9/ruby-30
ubi9/ruby-31
ubi9/s2i-base
ubi9/s2i-core

To pull a container image, run one of the following command as root based on the <image_name>:

podman pull registry.redhat.io/<image_name> (authenticated, rhel9 images)
podman pull registry.access.redhat.com/<image_name> (unauthenticated, ubi9 images)

Solution

The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the "podman pull" command.

For more information about the image, search the <image_name> in the Red Hat Ecosystem Catalog: https://catalog.redhat.com/software/containers/search.

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.6 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

• BZ - 2232002 - rebuild of httpd-24-container 9.3
• BZ - 2232003 - rebuild of mariadb-105-container 9.3
• BZ - 2232004 - rebuild of mysql-80-container 9.3
• BZ - 2232005 - rebuild of nginx-120-container 9.3
• BZ - 2232006 - rebuild of nodejs-16-container 9.3
• BZ - 2232007 - rebuild of nodejs-16-minimal-container 9.3
• BZ - 2232008 - rebuild of nodejs-18-container 9.3
• BZ - 2232009 - rebuild of perl-532-container 9.3
• BZ - 2232010 - rebuild of php-80-container 9.3
• BZ - 2232011 - rebuild of postgresql-13-container 9.3
• BZ - 2232012 - rebuild of python-39-container 9.3
• BZ - 2232013 - rebuild of redis-6-container 9.3
• BZ - 2232014 - rebuild of ruby-30-container 9.3
• BZ - 2232015 - rebuild of ruby-31-container 9.3
• BZ - 2232016 - rebuild of s2i-base-container 9.3
• BZ - 2232017 - rebuild of s2i-core-container 9.3
• BZ - 2232018 - rebuild of varnish-6-container 9.3

CVEs

• CVE-2007-4559
• CVE-2021-3826
• CVE-2021-43618
• CVE-2022-48468
• CVE-2023-4016
• CVE-2023-4641
• CVE-2023-22745
• CVE-2023-27522
• CVE-2023-27533
• CVE-2023-27534
• CVE-2023-27536
• CVE-2023-27538
• CVE-2023-29491
• CVE-2023-29499
• CVE-2023-31486
• CVE-2023-32611
• CVE-2023-32665
• CVE-2023-33460
• CVE-2023-36054
• CVE-2023-39975
• CVE-2023-44487

References

• https://catalog.redhat.com/software/containers/search