Red Hat Security Advisory

RHSA-2026:44624

Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 release

Released 2026-07-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.10.1 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9, registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9 +4

Fixes 5 records

TI-2026-05203 CVE-2026-5928 · GHSA-829p-mc9m-7xhr

Potential buffer under-read in ungetwc

HIGH 72

Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, ma…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00369 Published 2026-04-20 Partial fix CWE-127

TI-2026-28703 CVE-2026-39821 · GHSA-w2q5-6q6x-x959

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

MEDIUM 47

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01834 Published 2026-05-22 Partial fix · 1.25.13, 1.26.6 +2 CWE-1289

TI-2026-04758 CVE-2026-5435 · GHSA-32rw-r8mp-pw42

Potential buffer overflow in ns_sprintrrf TSIG handling path

LOW 38

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG rec…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00237 Published 2026-04-28 Partial fix CWE-787

TI-2026-28704 CVE-2026-39822 · GHSA-xcgv-8mv7-v8c7

Root escape via symlink plus trailing slash in os

LOW 36

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00232 Published 2026-07-08 Partial fix · 1.25.12, 1.26.5 +1 CWE-61

TI-2026-05472 CVE-2026-6238 · GHSA-h8wx-jcwq-g3cp

Buffer overread in ns_printrrf with corrupted RDATA field

LOW 35

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LO…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00358 Published 2026-04-28 Fixed CWE-126