Lucene search

K
redhatRedHatRHSA-2024:0998
HistoryFeb 27, 2024 - 2:22 a.m.

(RHSA-2024:0998) Low: Red Hat OpenShift distributed tracing 3.1.0 operator/operand containers

2024-02-2702:22:10
access.redhat.com
17
red hat openshift
distributed tracing
opentelemetry
tempo
version 0.93.0
2.3.1
1.53.0
cve-2023-26159
follow-redirects

7.3 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

Release of Red Hat OpenShift distributed tracing provides these changes: OpenTelemetry: support for target allocator. Tempo: Monolithic CRD, alerting for span RED metrics, TraceQL support for gateway. OpenTelemetry version 0.93.0. Tempo 2.3.1, Jaeger 1.53.0.

Security Fix(es):

CVE-2023-26159 follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse()