Red Hat Security AdvisoryRHSA-2020:3370
Red Hat OpenShift Jaeger 1.17.6 container images security update
Released 2020-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat OpenShift Jaeger 1.17 distributed-tracing/jaeger-agent-rhel7, distributed-tracing/jaeger-all-in-one-rhel7, distributed-tracing/jaeger-collector-rhel7 +5
Fixes 2 records
Priority MEDIUM 52
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.21052 · Published 2020-02-20 · Partial fix · 0.0.0-20200220183623-bac4c82f6975 CWE-347
Priority MEDIUM 41
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.05213 · Published 2020-07-15 · Partial fix · 4.17.19, 4.17.20 CWE-770
