RedHat: RHSA-2022-1679:01 Moderate: Cryostat 2.1.0: new Cryostat on RHEL 8
Summary
New Cryostat 2.1.0 on RHEL 8 container images have been released, adding a
variety of features and bug fixes and addressing the following security
vulnerability: CVE-2021-3121 (see References)
Users of Cryostat 2.0.0 on RHEL 8 container images are advised to upgrade
to these updated images, which contain backported patches to correct these
security issues, fix these bugs and add these enhancements. Users of these
images are also encouraged to rebuild all container images that depend on
these images.
You can find images updated by this advisory in Red Hat Container Catalog
(see References).
Summary
Solution
The Cryostat 2 on RHEL 8 container images provided by this update can be
downloaded from the Red Hat Container Registry at registry.redhat.io.
Installation instructions for your platform are available at Red Hat
Container Catalog (see References).
Dockerfiles and scripts should be amended either to refer to this new image
specifically, or to the latest image generally.
References
https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/cve/CVE-2021-3121 https://access.redhat.com/security/cve/CVE-2022-1154 https://access.redhat.com/security/cve/CVE-2022-1271 https://access.redhat.com/security/cve/CVE-2022-21426 https://access.redhat.com/security/cve/CVE-2022-21434 https://access.redhat.com/security/cve/CVE-2022-21443 https://access.redhat.com/security/cve/CVE-2022-21476 https://access.redhat.com/security/cve/CVE-2022-21496 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/containers
Package List
Topic
New Cryostat 2.1.0 on RHEL 8 container images are now available
Topic
Relevant Releases Architectures
Bugs Fixed
1921650 - CVE-2021-3121 gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation