(RHSA-2022:0318) Moderate: Red Hat OpenShift distributed tracing 2.1.0 security update

Release of Red Hat OpenShift distributed Tracing provides these changes:

Security Fix(es):

• golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet (CVE-2021-29923)

• golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The Red Hat OpenShift distributed tracing release notes provide information on
the features and known issues:

https://docs.openshift.com/container-platform/latest/distr_tracing/distributed-tracing-release-notes.html