RHBA-2021:0075

csafUSredhat_csaf

Red Hat Bug Fix Advisory: Red Hat OpenShift Jaeger 1.17.8 Operator/Operand Containers

view advisory published 2021-01-12

Red Hat OpenShift Jaeger 1.17.8.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2020-16845UShigh7.5—
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
CVE-2020-15586USmedium5.9—
Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and write…
02

references

External citations — patches, advisories, analysis.

03

remediations (16)

  • Fixeddistributed-tracing/jaeger-agent-rhel8@sha256:e50a0aabf41bd8557cddf6d211d3a4fe3eeefd76c69f214764a46d39f30243f6_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-agent-rhel8@sha256:e50a0aabf41bd8557cddf6d211d3a4fe3eeefd76c69f214764a46d39f30243f6_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-all-in-one-rhel8@sha256:34c921522039f5e5e0ba5ae1a6ba23770bb9c0764741af3962e61b482d7e1944_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-all-in-one-rhel8@sha256:34c921522039f5e5e0ba5ae1a6ba23770bb9c0764741af3962e61b482d7e1944_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-collector-rhel8@sha256:882b833099b6dc5fafee6aae4bba040ca1c2b503832e16f0197fe37bec1bd53a_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-collector-rhel8@sha256:882b833099b6dc5fafee6aae4bba040ca1c2b503832e16f0197fe37bec1bd53a_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:033d0bd0557820974ec5a5be32cf94a30bfec7bc105c8733b0875357f6ff3f68_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:033d0bd0557820974ec5a5be32cf94a30bfec7bc105c8733b0875357f6ff3f68_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-es-rollover-rhel8@sha256:f9e37212306aa89aa9cded345c4a904cf9a32e37945acd59ea205e90d9850252_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-es-rollover-rhel8@sha256:f9e37212306aa89aa9cded345c4a904cf9a32e37945acd59ea205e90d9850252_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-ingester-rhel8@sha256:d1537f420ca359d42f6fd08e172141c79f8620a1f127f26b2752a88e0ad74ee7_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-ingester-rhel8@sha256:d1537f420ca359d42f6fd08e172141c79f8620a1f127f26b2752a88e0ad74ee7_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-query-rhel8@sha256:d49f6f7ecf7ddbd1396dd90e010e8e5114a00599d3d8634b8637223588d8373d_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-query-rhel8@sha256:d49f6f7ecf7ddbd1396dd90e010e8e5114a00599d3d8634b8637223588d8373d_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-rhel8-operator@sha256:5d213b8efda4306a4f6f9044514e774273844979ac8eff800a5b26df2fbab66f_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
  • Fixeddistributed-tracing/jaeger-rhel8-operator@sha256:5d213b8efda4306a4f6f9044514e774273844979ac8eff800a5b26df2fbab66f_amd64 as a component of Red Hat OpenShift Jaeger 1.17

    Red Hat OpenShift Jaeger Release

    https://access.redhat.com/errata/RHBA-2021:0075
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan