RHSA-2025:3018: Moderate: Red Hat build of Cryostat 4.0.0: new RHEL 9 container image security update
New Red Hat build of Cryostat 4.0.0 on RHEL 9 container images have been released, adding a variety of features and bug fixes.Users of the Red Hat build of Cryostat 3.0.1 on RHEL 8 container images are advised to upgrade to these updated images, which contain backported patches to fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.Security Fix(es): io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling (CVE-2024-12397) You can find images updated by this advisory in the Red Hat Container Catalog (see the References section).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:3018?
The severity of RHSA-2025:3018 is classified as moderate.
How do I fix RHSA-2025:3018?
To fix RHSA-2025:3018, upgrade to the updated Red Hat build of Cryostat 4.0.0 on RHEL 9 container images.
What is the primary focus of RHSA-2025:3018?
The primary focus of RHSA-2025:3018 is to provide various features and bug fixes in the Cryostat application.
Which version of Red Hat Cryostat is affected by RHSA-2025:3018?
RHSA-2025:3018 affects Red Hat Cryostat version 3.0.1 on RHEL 8 container images.
Are backported patches included in RHSA-2025:3018?
Yes, RHSA-2025:3018 includes backported patches from newer versions to address security and stability issues.