Red Hat Security Advisory

RHSA-2021:3024

Red Hat OpenShift Jaeger 1.24.0 Operator/Operand Containers security update

Released 2021-08-09 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenShift Jaeger 1.24 distributed-tracing/jaeger-agent-rhel8, distributed-tracing/jaeger-all-in-one-rhel8, distributed-tracing/jaeger-collector-rhel8 +5

TI-2021-08826 CVE-2021-27292 · GHSA-78cj-fxph-m83p

LOW 39

ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03366 Published 2021-03-17 Partial fix · 0.7.24 CWE-400