RHSA-2026:33612
Vulnerability from csaf_redhat - Published: 2026-06-30 15:58 - Updated: 2026-06-30 16:00Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.1 release
Severity
Moderate
Notes
Topic: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.1 has been released
Details: This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* None
Bug fixes:
* Gateway query RBAC no longer fails to decode zstd-encoded responses: Before this update, the gateway query RBAC feature could not decode zstd-encoded responses from the Tempo API. As a consequence, the Tracing UI in the OpenShift Container Platform console failed with an "Error 502 Bad Gateway" message. With this update, the gateway query RBAC feature correctly decodes zstd-encoded responses. As a result, the Tracing UI works correctly. For more information, see https://redhat.atlassian.net/browse/TRACING-6419.
* Gateway query RBAC no longer exposes data from unauthorized namespaces: Before this update, the gateway failed to correctly redact some Tempo API responses when Query RBAC was enabled. As a consequence, users could see sensitive data from namespaces they were not authorized to access. With this update, the gateway correctly redacts all Tempo API responses. As a result, users only see data from namespaces to which they have access. For more information, see https://redhat.atlassian.net/browse/TRACING-6438.
* sort no longer fails or leaks data when using the traditional key format: Before this update, the sort utility in GNU Coreutils had a heap buffer under-read vulnerability in the begfield() function. When a user ran a sort command using the traditional key format, the program could access memory outside the allocated buffer. As a consequence, a crafted input could cause a crash or leak sensitive data. With this update, the buffer boundaries are properly validated. As a result, the sort utility no longer accesses memory outside the allocated buffer. For more information, see https://access.redhat.com/security/cve/cve-2025-5278.
* Error messages in the net/textproto package no longer include unsanitized input: Before this update, functions in the Go net/textproto package included their input as part of error messages without sanitization. As a consequence, an attacker could inject misleading content into these error messages. When printed or logged, the manipulated messages could cause confusion or misinterpretation of critical system information. With this update, the error messages no longer include unsanitized input. As a result, injected content can no longer appear in error output from the net/textproto package. For more information, see https://access.redhat.com/security/cve/cve-2026-42507.
Known issues:
* None
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
4.4 (Medium)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
20 references
Acknowledgments
Mohamed Maatallah
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift distributed tracing platform (Tempo) 3.10.1 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements and bug fixes.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* Gateway query RBAC no longer fails to decode zstd-encoded responses: Before this update, the gateway query RBAC feature could not decode zstd-encoded responses from the Tempo API. As a consequence, the Tracing UI in the OpenShift Container Platform console failed with an \"Error 502 Bad Gateway\" message. With this update, the gateway query RBAC feature correctly decodes zstd-encoded responses. As a result, the Tracing UI works correctly. For more information, see https://redhat.atlassian.net/browse/TRACING-6419.\n\n* Gateway query RBAC no longer exposes data from unauthorized namespaces: Before this update, the gateway failed to correctly redact some Tempo API responses when Query RBAC was enabled. As a consequence, users could see sensitive data from namespaces they were not authorized to access. With this update, the gateway correctly redacts all Tempo API responses. As a result, users only see data from namespaces to which they have access. For more information, see https://redhat.atlassian.net/browse/TRACING-6438.\n\n* sort no longer fails or leaks data when using the traditional key format: Before this update, the sort utility in GNU Coreutils had a heap buffer under-read vulnerability in the begfield() function. When a user ran a sort command using the traditional key format, the program could access memory outside the allocated buffer. As a consequence, a crafted input could cause a crash or leak sensitive data. With this update, the buffer boundaries are properly validated. As a result, the sort utility no longer accesses memory outside the allocated buffer. For more information, see https://access.redhat.com/security/cve/cve-2025-5278.\n\n* Error messages in the net/textproto package no longer include unsanitized input: Before this update, functions in the Go net/textproto package included their input as part of error messages without sanitization. As a consequence, an attacker could inject misleading content into these error messages. When printed or logged, the manipulated messages could cause confusion or misinterpretation of critical system information. With this update, the error messages no longer include unsanitized input. As a result, injected content can no longer appear in error output from the net/textproto package. For more information, see https://access.redhat.com/security/cve/cve-2026-42507.\n\n\nKnown issues:\n\n* None",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:33612",
"url": "https://access.redhat.com/errata/RHSA-2026:33612"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-5278",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42507",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33612.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.1 release",
"tracking": {
"current_release_date": "2026-06-30T16:00:18+00:00",
"generator": {
"date": "2026-06-30T16:00:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.1"
}
},
"id": "RHSA-2026:33612",
"initial_release_date": "2026-06-30T15:58:34+00:00",
"revision_history": [
{
"date": "2026-06-30T15:58:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-06-30T15:58:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-30T16:00:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.10.1",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-operator-bundle@sha256%3A3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-operator-bundle\u0026tag=1782510941"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1782501200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3Adb34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1782498923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1782501180"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1782501195"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3Aad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1782501220"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1782501196"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Abd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1782501200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1782498923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1782501180"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Ac473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1782501195"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1782501220"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3Ad216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1782501196"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1782501200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1782498923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1782501180"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Ad11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1782501195"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1782501220"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3Ac4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1782501196"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1782501200"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1782498923"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1782501180"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1782501195"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1782501220"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1782501196"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1",
"product_id": "Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.1"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mohamed Maatallah"
]
}
],
"cve": "CVE-2025-5278",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-05-27T13:50:20.148000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2368764"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GNU Coreutils. The sort utility\u0027s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The severity of this issue is considered Moderate rather than Critical because successful exploitation requires the use of the traditional key specification syntax with an exceptionally large character position value, which is uncommon in typical usage. Although the vulnerability can lead to a heap buffer overflow resulting in a read one byte before the allocated buffer, it does not enable code execution, privilege escalation, or direct compromise of data confidentiality or integrity. The impact is therefore primarily limited to potential service disruption due to application crashes.\n\nFurthermore, default RHEL configurations such as SELinux enforcement, ASLR, and memory protections reduce the likelihood of exploitation and limit the scope of any resulting impact. These safeguards, along with typical system usage patterns that do not commonly invoke the vulnerable code path, restrict exploitability in default and hardened environments. Consequently, the vulnerability\u2019s overall security impact is mitigated compared to flaws that allow immediate code execution or broader compromise across system components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "RHBZ#2368764",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"
},
{
"category": "external",
"summary": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
"url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"
}
],
"release_date": "2025-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:58:34+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33612"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-06-30T15:58:34+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:33612"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1c35ffcda8a79fde89e015fff93a8ac141f8dba83005544e84720b798238f199_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:1dbd03fe5f4e3f7f1269bb8c9f7885b8409baa3bff409db7ebb82616408fdcf9_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cef16e3b5fc9801df8f9af0f548fae67084aa443b97ff6e5d6b5948ca32f83c_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:60e8c2259fe2f9e0dc96352a9fb445ce6b46924a145d508c0e6d5d6799298a6a_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:50dac697d73efc8de62908d09f65eebff1ce233a2887ae0000487e2d88a4affb_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:60d520725c077f58868da56fb88ff4a96920488b70530288c1d38b795d0ca488_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:85322d8e92a00032d79d0aa76c84af3f8f8cce573de0c5b84e26f9da767bcc65_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:bd621c6cb986052cd8f256402d7d55eba132dd18b7e5a90791141303bedb32ba_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0fd23ceb3458cc5bbf9ca4ffe2c33ce6f8b46768851032f5310b22987be8921b_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:651f65b1d6258c7c21b4a6eb7cb3c22edda96030f40675d882fa28e0dee23059_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8fb4cdafb7c43209075abc13076c2ec07baebe7bb8e1f23928b3856a04861f38_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:db34d682b3dddba3ee5b317ecc63a0db1dd2d1e454b259bd13d5566ec3dd021c_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:3553b5e91195dcf76755e3c59bcc3ec8edda71dd367c6dc1b1ddfb4c38ab1d66_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:033f4d70a5c1e3c2a833333d5ccee534af24f50a06519e9a7ae6bb6d6d70dad5_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:050d65343cb3073199bc8adf90f2830c04176597a974a5a7a59d5a605ff6f8c6_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:363a16b61c1cbdffffa7d9e30c944299e0bd086d8ab82d983115fdeb1b8b9b46_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad26ab5180cd6a528b06925c9b08f83d7071172ec30dd5dc32ddd91759eaa431_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:1388a99e52e031fdc03393c4ed373a0a9430eb0c8f128cb64e80238279dfd660_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:8678c7482ea9573d0b02bd4669c1c7108f5fcd059353ad38e53516493298ce8d_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:c473f6d6e10b9e49cbcad665cd9cea4e1b18af4db90198f77d0bee8f98991f19_arm64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d11c619e19939bef7a291c417d73e32889397eaf1ccd133ce5a703886929a49b_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:0a2721882e16552c55b70d49948474e6e1b6dbf9506bebc0f828f348bc83e3a6_s390x",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5ad3b2d9aeb3cb41ab978542b10d04e6f9ab0ed05446bce95393f617992d7296_amd64",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:c4a7558e7671252e5b4260ed54460019ca28b78e408a5820d4d781c3744bc8cd_ppc64le",
"Red Hat OpenShift distributed tracing 3.10.1:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d216daca9791470907f050928609bfdcb410936d99a5fda1443c577da449ea89_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…