Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

RedHat: RHSA-2023-3167-01 Moderate: Cryostat 2.3.0 Container Update

red hat
Calendar Grey May 18, 2023
Dist Redhat Esm H88
A fresh build of Cryostat 2.3.0 for RHEL 8 container images by Red Hat has been launched, improving functionalities and addressing issues.
New Red Hat build of Cryostat 2.3.0 on RHEL 8 container images are now available 2

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Summary

New Red Hat build of Cryostat 2.3.0 on RHEL 8 container images have been released, adding a variety of features and bug fixes.
Users of the Red Hat build of Cryostat 2.2.1 on RHEL 8 container images are advised to upgrade to these updated images, which contain backported patches to fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.
You can find images updated by this advisory in Red Hat Container Catalog (see References).

Topics%20covered

Topics Covered

security advisory bug fix release RHEL container images Cryostat moderate fixes

References

https://access.redhat.com/security/cve/CVE-2022-41723 https://access.redhat.com/security/cve/CVE-2022-41724 https://access.redhat.com/security/cve/CVE-2022-41725 https://access.redhat.com/security/cve/CVE-2023-24534 https://access.redhat.com/security/cve/CVE-2023-24536 https://access.redhat.com/security/cve/CVE-2023-24537 https://access.redhat.com/security/updates/classification#moderate https://catalog.redhat.com/en

Package List


Advisory ID: RHSA-2023:3167-01
Product: Cryostat
Advisory URL: https://access.redhat.com/errata/RHSA-2023:3167
Issue date: 2023-05-18

Topic

New Red Hat build of Cryostat 2.3.0 on RHEL 8 container images are nowavailable

Topics%20covered

Topics Covered

security advisory bug fix release RHEL container images Cryostat moderate fixes

Relevant Releases Architectures

Bugs Fixed

2178358 - CVE-2022-41723 net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

2178488 - CVE-2022-41725 golang: net/http, mime/multipart: denial of service from excessive resource consumption

2178492 - CVE-2022-41724 golang: crypto/tls: large handshake records may cause panics

2184482 - CVE-2023-24536 golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption

2184483 - CVE-2023-24534 golang: net/http, net/textproto: denial of service from excessive memory allocation

2184484 - CVE-2023-24537 golang: go/parser: Infinite loop in parsing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here