Red Hat Security Advisory

RHSA-2026:94580

Red Hat OpenShift distributed tracing platform (Tempo) 3.11.4 release

Released 2026-11-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9, registry.redhat.io/rhosdt/tempo-gateway-rhel9, registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9 +2

TI-2026-80931 CVE-2026-116591 · GHSA-fpmh-frq8-7rj8

MEDIUM 44

compress provides various compression algorithms.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00333 Published 2026-10-26 Partial fix · 1.20.2 CWE-190

TI-2026-82205 CVE-2026-118664 · GHSA-qr28-fpjm-wq7f

LOW 36

decode-uri-component provides a more robust alternative to decodeURIComponent.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00318 Published 2026-10-28 Partial fix · 0.5.1 CWE-400