RHSA-2026:6341HighCVSS 7.5

Red Hat Security Advisory: Red Hat build of Cryostat security update

Published
April 1, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-25679 →

📋 Description

CVE-2026-25679 — net/url: Incorrect parsing of IPv6 host literals in net/url

🎯 Affected products21

  • Cryostat 4 on RHEL 9
  • cryostat/cryostat-agent-init-rhel9@sha256:7fed153b85c3e15b93d2b04e7aac14d7169aff25b3d290cf0f8760305beb0b96_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-agent-init-rhel9@sha256:ea94c84c3d002574b52a6cd077057eb624af4e033f2b0ca17788963bda0b8b99_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-db-rhel9@sha256:142758ed9e3576cb133c5644caf836ad71e5e0d7b704e628995f4a636464414c_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-db-rhel9@sha256:7710ba02d26a3511332f53455afa7aff6630a2a16e02906f67ddca87fbdde683_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-grafana-dashboard-rhel9@sha256:6c67ec710591e469014f53621b1977d596cd1b5aaf0c50c71fba5b937f97dab0_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-grafana-dashboard-rhel9@sha256:7f297a90fd4d0d006ea0c5c8758cb3cf49d249e9b0a3f40924136fe4f4179460_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-openshift-console-plugin-rhel9@sha256:49687873862b452e4a3890663d3bbfe95412713088af9a2d5f32d256a4dc3f5e_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-openshift-console-plugin-rhel9@sha256:ce8f7a591e017ab963337694227ed32d75bc4832f3a338159d3011f96859ffd4_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-operator-bundle@sha256:0281e3fd6d501df5d67246044f98243e7ed88ee4a61c32b42be261a9aa116290_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-operator-bundle@sha256:46677e38ae7f44d21676b7f44be842fdfa8242c3c96ced432e29c245b2fa483a_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-reports-rhel9@sha256:655d96e92b777adc08edf16ff72c1cb6622b52a701fd928bd82ff901003f8e07_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-reports-rhel9@sha256:7856d929beb9198f4d0139825ed65e9b24bb895e910d608ba91d0255f30f9844_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-rhel9-operator@sha256:92edd503080b2c35cf513ddbbecacdc0942f9e9b0576c860b373078683503119_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-rhel9-operator@sha256:ce134470d6345c43eba1f8b6d585118860ceb9bc5f7dae5d76db55c861e3db3e_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-rhel9@sha256:51e689ddc03f5cbedb9a25e7001814d87a15be63809e4313027d603e5709d8fc_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-rhel9@sha256:900f94e2359940f703669dd8c62490a1392afadb666ca1b0b494184772085020_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-storage-rhel9@sha256:1465752cc44bc548eb638a098bb6638b31e1b68f681831d76119529127a7b219_amd64 as a component of Cryostat 4 on RHEL 9
  • cryostat/cryostat-storage-rhel9@sha256:ce8aaa6975d322e9eb9ef2d3b822b2bd29a8d8ebccfe0ec668fd76a57b61a736_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/jfr-datasource-rhel9@sha256:6da38459c39df5db65c75202dcfcd675094590fb4b21ed8c0789b8a16b053016_arm64 as a component of Cryostat 4 on RHEL 9
  • cryostat/jfr-datasource-rhel9@sha256:6e42be9460b630cb44f31b01fc902a6a60a2cf2c28abbec3ecacf268603ae977_amd64 as a component of Cryostat 4 on RHEL 9

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (4)