Red Hat Security Advisory

RHSA-2026:79368

Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 release

Released 2026-10-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9, registry.redhat.io/rhosdt/tempo-query-rhel9 +2

TI-2026-58035 CVE-2026-84445 · GHSA-2v4p-qf9q-27wj

MEDIUM 45

gRPC-Go is the Go language implementation of gRPC.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00641 Published 2026-09-14 Partial fix · 1.82.2, 1.83.2 +2 CWE-129

TI-2026-65881 CVE-2026-83663 · GHSA-rvwr-5g7j-6pm8

MEDIUM 43

Uncontrolled Recursion vulnerability in Apache Thrift go bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00277 Published 2026-10-02 Partial fix · 0.25.0 CWE-674

TI-2026-65952 CVE-2026-94637 · GHSA-r5wc-ghwh-wjv9

MEDIUM 41

Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00277 Published 2026-10-02 Partial fix · 0.25.0 CWE-409

TI-2026-45095 CVE-2026-63209 · GHSA-259r-337f-4rfw

MEDIUM 40

compress provides various compression algorithms.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00572 Published 2026-09-29 Partial fix · 1.18.7 CWE-190