RHSA-2026:79368
Vulnerability from csaf_redhat - Published: 2026-10-08 16:17 - Updated: 2026-10-09 11:56Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 release
Severity
Important
Notes
Topic: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 has been released
Details: This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* None
Bug fixes:
* None
Known issues:
* None
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted network frames with zero payload bytes to an affected Go service. When processing these empty frames, the transport recursively calls its read function rather than iterating in a loop, exhausting the execution stack. This stack exhaustion causes an unrecoverable fatal error that terminates the entire process.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64 | — |
Threats
Impact
Important
A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leading to a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
12 products, the same list as for
CVE-2026-83663
Known not affected
13 products, the same list as for
CVE-2026-83663
Threats
Impact
Important
References
40 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* None\n\n\nKnown issues:\n\n* None",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:79368",
"url": "https://access.redhat.com/errata/RHSA-2026:79368"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63209",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83663",
"url": "https://access.redhat.com/security/cve/CVE-2026-83663"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-94637",
"url": "https://access.redhat.com/security/cve/CVE-2026-94637"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79368.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 release",
"tracking": {
"current_release_date": "2026-10-09T11:56:23+00:00",
"generator": {
"date": "2026-10-09T11:56:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:79368",
"initial_release_date": "2026-10-08T16:17:42+00:00",
"revision_history": [
{
"date": "2026-10-08T16:17:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-08T16:17:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-09T11:56:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.11.2",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.11::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-operator-bundle@sha256%3Aa0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-operator-bundle\u0026tag=1791462496"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1791452560"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1791452569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1791456914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1791452562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1791452557"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1791452605"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Aecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1791452560"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3Ae0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1791452569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1791456914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1791452562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1791452557"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1791452605"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Af38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1791452560"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1791452569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Ab182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1791456914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Afe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1791452562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1791452557"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3Ab7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1791452605"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1791452560"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1791452569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1791456914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Acfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1791452562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3Aad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1791452557"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1791452605"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64 as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11.2",
"product_id": "Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-63209",
"cwe": {
"id": "CWE-823",
"name": "Use of Out-of-range Pointer Offset"
},
"discovery_date": "2026-09-29T15:12:15.658458+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543236"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "RHBZ#2543236",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
"url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
"url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
"url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
}
],
"release_date": "2026-09-29T14:58:53.366000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-08T16:17:42+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:79368"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
},
{
"cve": "CVE-2026-83663",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-02T12:58:05.145390+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545170"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted network frames with zero payload bytes to an affected Go service. When processing these empty frames, the transport recursively calls its read function rather than iterating in a loop, exhausting the execution stack. This stack exhaustion causes an unrecoverable fatal error that terminates the entire process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has an Important impact because a remote attacker can send crafted requests to an affected Go Apache Thrift service and cause excessive recursion in transport handling, resulting in denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83663"
},
{
"category": "external",
"summary": "RHBZ#2545170",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545170"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83663",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83663"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83663",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83663"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1",
"url": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/yjz317wq7h86q9k8ws6ton0ojgl8hjct",
"url": "https://lists.apache.org/thread/yjz317wq7h86q9k8ws6ton0ojgl8hjct"
}
],
"release_date": "2026-10-02T12:18:16.955000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-08T16:17:42+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:79368"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports"
},
{
"cve": "CVE-2026-84445",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-14T16:22:17.356407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "RHBZ#2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
"url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
"url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
"url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/issues/9354",
"url": "https://github.com/grpc/grpc-go/issues/9354"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9365",
"url": "https://github.com/grpc/grpc-go/pull/9365"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9366",
"url": "https://github.com/grpc/grpc-go/pull/9366"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9367",
"url": "https://github.com/grpc/grpc-go/pull/9367"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
}
],
"release_date": "2026-09-14T16:11:41.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-08T16:17:42+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:79368"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
},
{
"cve": "CVE-2026-94637",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-10-02T12:32:24.490602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Apache Thrift Go library. A remote attacker could exploit this vulnerability by submitting specially crafted, highly compressed data to an affected service. Due to improper handling during decompression, the resulting data amplification can exhaust system resources, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has an Important impact because a remote attacker can send crafted ZLIB-transformed frames to an affected Go Apache Thrift service, causing resource exhaustion and denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-94637"
},
{
"category": "external",
"summary": "RHBZ#2545152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-94637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-94637"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-94637",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94637"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1",
"url": "https://lists.apache.org/thread/33otcgbqd27wf6qq810q56znzbomnhg1"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/6hxll1jcnod9gfr225tz7my08lpj3jmt",
"url": "https://lists.apache.org/thread/6hxll1jcnod9gfr225tz7my08lpj3jmt"
}
],
"release_date": "2026-10-02T11:49:02.869000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-08T16:17:42+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:79368"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x",
"Red Hat OpenShift distributed tracing 3.11.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…