Red Hat Security Advisory

RHSA-2022:0163

Cryostat security update

Released 2022-01-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Cryostat 2 on RHEL 8 cryostat-20-tech-preview/cryostat-operator-bundle, cryostat-20-tech-preview/cryostat-rhel8-operator

Fixes 1 record

TI-2021-20237 CVE-2021-44716 · GHSA-vc3p-29h2-gpcp

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory…

MEDIUM 40

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04254 Published 2022-01-01 Partial fix · 0.0.0-20211209124913-491a49abca63 CWE-400