RHEA-2023:4558 - Product Enhancement Advisory

Topic

An updated rhel8/buildah container image is now available in the Red Hat
Container Registry.

Description

Buildah provides a command line tool which can be used to:

• create a working container from scratch or
• create a working container from an image as a starting point
• mount/umount a working container's root file system for manipulation
• save container's root file system layer to create a new image
• delete a working container or an image

This updates the rhel8/buildah image in the Red Hat Container Registry.

To pull this container image, run one of the following commands:

podman pull registry.redhat.io/rhel8/buildah (authenticated)
podman pull registry.access.redhat.com/ubi8/buildah (unauthenticated)

Solution

The container image provided by this update can be downloaded from the Red
Hat Container Registry at registry.redhat.io using the "podman pull"
command.

For more information about the image, search the <image_name> in the Red
Hat Ecosystem Catalog:
https://catalog.redhat.com/software/containers/search.

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Fixes

• BZ - 2225065 - rebuild of buildah-container 8.8

CVEs

• CVE-2023-2602
• CVE-2023-2603
• CVE-2023-27536
• CVE-2023-28321
• CVE-2023-28484
• CVE-2023-29469
• CVE-2023-32681

References

(none)