Red Hat Security Advisory

RHSA-2022:4985

Cryostat 2.1.1: new Cryostat on RHEL 8 container images

Released 2022-06-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Cryostat 2 on RHEL 8 cryostat-tech-preview/cryostat-operator-bundle, cryostat-tech-preview/cryostat-reports-rhel8, cryostat-tech-preview/cryostat-rhel8 +2

Fixes 2 records

TI-2022-09231 CVE-2022-25647 · GHSA-4jrv-ppp4-jm57

Deserialization of untrusted data in com.google.code.gson:gson

MEDIUM 50

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.1223 Published 2022-05-01 Partial fix · 2.8.9 CWE-502

TI-2022-11545 CVE-2022-28948 · GHSA-hp87-p4gw-j4gq

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when…

MEDIUM 40

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03965 Published 2022-05-19 Partial fix · 3.0.1 CWE-502