- Vulnerability/
- RHSA-2025:3018
RHSA-2025:3018: Moderate: Red Hat build of Cryostat 4.0.0: new RHEL 9 container image security update
First published: Wed Mar 19 2025(Updated: )
New Red Hat build of Cryostat 4.0.0 on RHEL 9 container images have been released, adding a variety of features and bug fixes.<br>Users of the Red Hat build of Cryostat 3.0.1 on RHEL 8 container images are advised to upgrade to these updated images, which contain backported patches to fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.<br>Security Fix(es):<br><li> io.quarkus.http/quarkus-http-core: Quarkus HTTP Cookie Smuggling (CVE-2024-12397)</li> You can find images updated by this advisory in the Red Hat Container Catalog (see the References section).
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Cryostat | <3.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2025:3018?
The severity of RHSA-2025:3018 is classified as moderate.
How do I fix RHSA-2025:3018?
To fix RHSA-2025:3018, upgrade to the updated Red Hat build of Cryostat 4.0.0 on RHEL 9 container images.
What is the primary focus of RHSA-2025:3018?
The primary focus of RHSA-2025:3018 is to provide various features and bug fixes in the Cryostat application.
Which version of Red Hat Cryostat is affected by RHSA-2025:3018?
RHSA-2025:3018 affects Red Hat Cryostat version 3.0.1 on RHEL 8 container images.
Are backported patches included in RHSA-2025:3018?
Yes, RHSA-2025:3018 includes backported patches from newer versions to address security and stability issues.
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2025:3018
- agent/remedy
- agent/source
- agent/title
- agent/last-modified-date
- agent/type
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/red hat
- canonical/red hat cryostat