RHSA-2023:2728: Moderate: Red Hat OpenShift Distributed Tracing 2.8.0 security update
The Red Hat OpenShift Distributed Tracing 2.8 container images have been updated. CVE-2022-41717 was fixed as part of this release.<br>Users of Red Hat OpenShift Distributed Tracing 2.8 container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs, and add these enhancements.<br>Tempo Operator added as Tech Preview.<br>You can find images updated by this advisory in Red Hat Container Catalog (see<br>References).<br>Security Fix(es):<br><li> golang: net/<a href="http:" target="blank">http:</a> excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, see the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:2728?
The severity of RHSA-2023:2728 is categorized as a moderate vulnerability due to the fix for CVE-2022-41717.
How do I fix RHSA-2023:2728?
To fix RHSA-2023:2728, users should upgrade to the updated Red Hat OpenShift Distributed Tracing 2.8 container images.
Is my system vulnerable to RHSA-2023:2728?
If you are using Red Hat OpenShift Distributed Tracing 2.8 container images without the latest updates, your system may be vulnerable to RHSA-2023:2728.
What is the impact of not addressing RHSA-2023:2728?
Failing to address RHSA-2023:2728 could expose your system to potential exploitation through the vulnerabilities addressed.
When was RHSA-2023:2728 released?
RHSA-2023:2728 was released in response to vulnerabilities discovered in Red Hat OpenShift Distributed Tracing, specifically addressing CVE-2022-41717.