Red Hat Security Advisory

RHSA-2024:0998

Red Hat OpenShift distributed tracing 3.1.0 operator/operand containers

Released 2024-02-27 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.1 rhosdt/jaeger-agent-rhel8, rhosdt/jaeger-all-in-one-rhel8, rhosdt/jaeger-collector-rhel8 +16

Fixes 1 record

TI-2023-11383 CVE-2023-26159 · GHSA-jchw-25xp-jwwc

Improper input validation in follow-redirects

HIGH 65

Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00797 Published 2024-01-02 Partial fix · 1.15.4 CWE-20