Red Hat Security Advisory

RHSA-2025:10823

Red Hat build of Tempo 3.6.1 release

Released 2025-07-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.6.0 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8, registry.redhat.io/rhosdt/tempo-gateway-rhel8, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8 +3

TI-2025-05440 CVE-2025-6020

LOW 36

A flaw was found in linux-pam.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00472 Published 2025-06-17 Fixed in 1.7.1, 1.6.1-8.el10 +49 CWE-22

TI-2025-04171 CVE-2025-4673 · GHSA-62jj-gr2r-5c34

LOW 31

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00669 Published 2025-06-11 Partial fix · 1.23.10, 1.24.4