Lucene search

K
redhatRedHatRHSA-2024:4173
HistoryJul 08, 2024 - 2:19 a.m.

(RHSA-2024:4173) Moderate: Red Hat build of Cryostat 3.0.0: new RHEL 8 container image security update

2024-07-0802:19:41
access.redhat.com
9
red hat
cryostat 3.0.0
rhel 8
security update
backported patches
container images
bouncycastle
cve-2024-30171

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7

Confidence

Low

New Red Hat build of Cryostat 3.0.0 on RHEL 8 container images have been released, adding a variety of features and bug fixes.

Users of the Red Hat build of Cryostat 2.4.0 on RHEL 8 container images are advised to upgrade to these updated images, which contain backported patches to fix these bugs and add these enhancements. Users of these images are also encouraged to rebuild all container images that depend on these images.

Security Fix(es):

  • org.bouncycastle-bcprov-jdk18on: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) (CVE-2024-30171)

You can find images updated by this advisory in the Red Hat Container Catalog (see the References section).

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7

Confidence

Low