RHSA-2021:3229MediumCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.20.5 security update

Published
August 19, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (5)

CVE-2021-33195 →CVE-2021-33196 →CVE-2021-33197 →CVE-2021-33198 →CVE-2021-34558 →

📋 Description

CVE-2021-33195 — golang: net: lookup functions may return invalid host names CVE-2021-33196 — golang: archive/zip: malformed archive may cause panic or memory exhaustion CVE-2021-33197 — golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty CVE-2021-33198 — golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-34558 — golang: crypto/tls: certificate of wrong type is causing TLS client to panic

🎯 Affected products25

  • Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-agent-rhel8@sha256:3a3a04a589453a63a740c939c2246e09e92a2571c95b187b332dc6c08cd23894_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-agent-rhel8@sha256:a0b2d55420c0d807dfa80d7b5373f7f235cf0ad5edcc7075af0a549e7c179b01_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-agent-rhel8@sha256:afb97248879b0125fe657013c43db156d79f4e3b8096e432fe1445e2277e22d6_ppc64le as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-all-in-one-rhel8@sha256:15ae661e4fca96e541514553fc80a40adfbe9bc174d04be529879d333a52341a_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-all-in-one-rhel8@sha256:2888fe791e253b0996905494a87fe22d0a1244c80bb5915da81598f7ba494fe2_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-all-in-one-rhel8@sha256:f3fb0f3c7dd9f9b54a9d8c865027133da58e583d44d548fbe70017aa75e15d05_ppc64le as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-collector-rhel8@sha256:0c844f2c3806f4c45fa9ac2d33cf4feb211a65e4ebd0fe1faf40744633f7a88c_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-collector-rhel8@sha256:8e746d4997cd41c5051b86b5a6aea25789a04021257ca720b39ca607cbc0c0d7_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-collector-rhel8@sha256:f4b09dab750c8771f7691dcd7ba67e67ec959db0015a9f2e16056ac4064ef60a_ppc64le as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:1601e98d05a3c596c6b165281d2221b9979d5d07ca6c3a5314db70c97fe3b1ed_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:4f057e83926ddffd190344754ff7722c0593d59ec083f4a36edab3cc78066319_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:5fde9fd6a7006f09a286d9453b97f61fe8d8d9c52ce15c81951e6e7242af9d04_ppc64le as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-es-rollover-rhel8@sha256:1e28d2b8c9690eae2e724cdf640340d1327f60d6b2f9498053d089489d3bc0d9_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-es-rollover-rhel8@sha256:6219e0a17e036b1056dda2a4eab694bbece960cde9b38984c12bbfb617d8f74a_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-es-rollover-rhel8@sha256:b3904f13916a5260bc05d336f475ea7d04cb27f94d036716406093dc9c4bc8de_ppc64le as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-ingester-rhel8@sha256:45a12e906eccb6181bbe7ec79df4cd26241a78d2dbf6ef554b5e54072ba015dc_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-ingester-rhel8@sha256:638c759beacd3ec5147c7d969d4adadac314b669ac7fab130e485fb050e30a07_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-ingester-rhel8@sha256:9a34b254114e0ce09732cff1958a99bd33d0bf2022011314ef44c09033df5c59_ppc64le as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-query-rhel8@sha256:91e546e6dc677b1c8f1f2c47c42317ad607adcfccf7ad9a697f50bb1d4566b19_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-query-rhel8@sha256:9245616fdd3f13177fd380e9ead380d36920fe1f8ff818109beb5a08437d355f_ppc64le as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-query-rhel8@sha256:db6b9a249117eb67f507970e2e0393cc31a12a13fcadd83556bdad5825d78950_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-rhel8-operator@sha256:2dc897bcc64f04d3b61eee46a1145f55c108384e91648621eb28c592e445e76e_s390x as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-rhel8-operator@sha256:2dfdc0fc7dc477b8f84403bbc639751fe7ad37521458b0a110add25c6b50a81f_amd64 as a component of Red Hat OpenShift Jaeger 1.20
  • distributed-tracing/jaeger-rhel8-operator@sha256:a169e3ef17190613e28ffbdaf852a4eaf539b1ca62679ac030d08eb629cfd136_ppc64le as a component of Red Hat OpenShift Jaeger 1.20

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://docs.openshift.com/container-platform/4.8/jaeger/jaeger_install/rhbjaeger-updating.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (10)