Where
-Infinity
0
Severity
4

Moderate: Red Hat OpenShift distributed tracing 3.3.0 operator/operand containers

1 / 2
Source: Red Hat

Remedy

Red Hat OpenShift distributed tracing Release
First published (updated )
Severity
7

Important: Red Hat OpenShift distributed tracing 3.2.1 operator containers security update

1 / 2
Source: Red Hat

Remedy

For details on how to apply this update, which includes the changes described in this advisory, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7

Important: Red Hat OpenShift distributed tracing 3.2.0 operator/operand containers update

1 / 2
Source: Red Hat

Remedy

Red Hat OpenShift distributed tracing Release
First published (updated )
Severity
4

Moderate: Red Hat OpenShift distributed tracing 3.1.1 operator/operand containers

1 / 2
Source: Red Hat

Remedy

For details on how to apply this update, which includes the changes described in this advisory, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
1
Input Validation

Low: Red Hat OpenShift distributed tracing 3.1.0 operator/operand containers

1 / 2
Source: Red Hat

Remedy

Red Hat OpenShift distributed tracing Release
First published (updated )
Severity
7

Important: Red Hat OpenShift distributed tracing 3.0.0 operator/operand containers

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.<br>To update all RPMs for your particular architecture, run:<br>rpm -Fvh [filenames]<br>where [filenames] is a list of the RPMs you wish to upgrade. Only those<br>RPMs which are currently installed will be updated. Those RPMs which are<br>not installed but included in the list will not be updated. Note that you<br>can also use wildcards (*.rpm) if your current directory *only* contains the<br>desired RPMs.<br>Please note that this update is also available via Red Hat Network. Many<br>people find this an easier way to apply updates. To use Red Hat Network,<br>launch the Red Hat Update Agent with the following command:<br>up2date<br>This will start an interactive process that will result in the appropriate<br>RPMs being upgraded on your system.
First published (updated )
Severity
7

Important: Red Hat OpenShift distributed tracing 2.9.0 containers security update

Remedy

To update all RPMs for your particular architecture, run:<br>rpm -Fvh [filenames]<br>where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are<br>not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.<br>Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network,<br>launch the Red Hat Update Agent with the following command:<br>up2date<br>This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
First published (updated )
Severity
4

Moderate: Red Hat OpenShift Distributed Tracing 2.9.0 security update

Remedy

To update all RPMs for your particular architecture, run:<br>rpm -Fvh [filenames]<br>where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are<br>not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.<br>Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network,<br>launch the Red Hat Update Agent with the following command:<br>up2date<br>This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
First published (updated )

The Red Hat OpenShift Distributed Tracing 2.8 container images have been updated. CVE-2022-41717 was fixed as part of this release.<br>Users of Red Hat OpenShift Distributed Tracing 2.8 container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues, fix these bugs, and add these enhancements.<br>Tempo Operator added as Tech Preview.<br>You can find images updated by this advisory in Red Hat Container Catalog (see<br>References).<br>Security Fix(es):<br><li> golang: net/<a href="http:" target="blank">http:</a> excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, see the CVE page(s) listed in the References section.

Remedy

Before applying this update, make sure all previously released errata<br>relevant to your system have been applied.<br>To update all RPMs for your particular architecture, run:<br>rpm -Fvh [filenames]<br>where [filenames] is a list of the RPMs you wish to upgrade. Only those<br>RPMs which are currently installed will be updated. Those RPMs which are<br>not installed but included in the list will not be updated. Note that you<br>can also use wildcards (*.rpm) if your current directory *only* contains the<br>desired RPMs.<br>Please note that this update is also available via Red Hat Network. Many<br>people find this an easier way to apply updates. To use Red Hat Network,<br>launch the Red Hat Update Agent with the following command:<br>up2date<br>This will start an interactive process that will result in the appropriate<br>RPMs being upgraded on your system.
First published (updated )
Path Traversal

This release of Red Hat OpenShift distributed tracing provides these changes:Security Fix(es): nodejs-json-schema: Prototype pollution vulnerability (CVE-2021-3918) eventsource: Exposure of Sensitive Information (CVE-2022-1650) moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129) follow-redirects: Exposure of Sensitive Information via Authorization Header leak (CVE-2022-0536) Moment.js: Path traversal in moment.locale (CVE-2022-24785) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Remedy

For details on how to apply this update, which includes the changes described in this advisory, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )

Release of Red Hat OpenShift distributed Tracing provides these changes:Security Fix(es): golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet (CVE-2021-29923) golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.The Red Hat OpenShift distributed tracing release notes provide information onthe features and known issues:https://docs.openshift.com/container-platform/latest/distrtracing/distributed-tracing-release-notes.html

Remedy

For details on how to apply this update, which includes the changes described in this advisory, refer to:<br><a href="https://docs.openshift.com/container-platform/latest/distr_tracing/distr_tracing_install/distr-tracing-updating.html" target="_blank">https://docs.openshift.com/container-platform/latest/distr_tracing/distr_tracing_install/distr-tracing-updating.html</a>
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203