Red Hat Security AdvisoryRHSA-2026:33612
Red Hat OpenShift distributed tracing platform (Tempo) 3.10.1 release
Released 2026-06-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift distributed tracing 3.10.1 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9, registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9 +4
Fixes 3 records
Priority LOW 30
When returning errors, functions in the net/textproto package would include its input as part of the error.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0037 · Published 2026-06-02 · Partial fix · 1.25.11, 1.26.4
Priority LOW 29
The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenticated user to read span attributes belongin…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00402 · Published 2026-07-13 · Fixed in 1782510941, 1782501195 CWE-863
Priority LOW 20
A flaw was found in GNU Coreutils.
CVSS 3.1MEDIUM 4.4· Local · No auth · User interaction · EPSS 0.0031 · Published 2025-05-27 · Partial fix · 9.8, 9.5-8.el10_2 +33 CWE-121
THREATIST.IORead the docs