Red Hat Security Advisory

RHSA-2022:0318

Red Hat OpenShift distributed tracing 2.1.0 security update

Released 2022-01-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 2.1 rhosdt/jaeger-agent-rhel8, rhosdt/jaeger-all-in-one-rhel8, rhosdt/jaeger-collector-rhel8 +9

Fixes 2 records

TI-2021-10545 CVE-2021-29923 · GHSA-38h6-vxp4-qxvm

Go before 1.17 does not properly consider extraneous zero characters at the beginning of…

LOW 39

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03744 Published 2021-08-07 Partial fix

TI-2021-14632 CVE-2021-36221 · GHSA-6qcx-qr4g-4fx9

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a…

LOW 32

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03114 Published 2021-08-08 Partial fix CWE-362