Vulnerabilities of Red Hat Red Hat OpenShift distributed tracing 3.10.2

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-54369	acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions…	8.4 High	Jun 29, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-43869	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Not rated	May 5, 2026
CVE-2025-48431	Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings	Not rated	Apr 28, 2026
CVE-2025-5278	Coreutils: heap buffer under-read in gnu coreutils sort via key specification	4.4 Medium	May 27, 2025