RHSA-2026:44624

Vulnerability from csaf_redhat - Published: 2026-07-23 18:45 - Updated: 2026-07-24 12:54
Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 release
Severity
Important
Notes
Topic: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 has been released
Details: This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements. Breaking changes: * None Deprecations: * None Technology Preview features: * None Enhancements: * None Bug fixes: * Punycode labels are no longer processed incorrectly: Before this update, the golang.org/x/net/idna package incorrectly processed certain Punycode labels during internationalized domain name conversion. As a consequence, an attacker could craft a domain name that resolved to a different host than the one that was validated, which could lead to privilege escalation. With this update, Punycode labels are processed correctly. As a result, converted domain names match the validated input. For more information, see https://access.redhat.com/security/cve/cve-2026-39821. * The os.Root type no longer follows symbolic links outside of its root: Before this update, the Go os package did not correctly restrict some operations performed through an os.Root value. As a consequence, an attacker who controlled a symbolic link inside the root directory could traverse outside of it and access files elsewhere on the file system. With this update, operations on an os.Root value are correctly confined to the root directory. As a result, symbolic links can no longer be used to escape the root. For more information, see https://access.redhat.com/security/cve/cve-2026-39822. * The ungetwc function no longer mishandles specific wide character encodings: Before this update, the ungetwc function in the GNU C Library mishandled certain wide character encodings. As a consequence, an application could disclose information or terminate unexpectedly. With this update, the wide character encodings are handled correctly. As a result, the affected applications no longer disclose information or crash. For more information, see https://access.redhat.com/security/cve/cve-2026-5928. * TSIG record processing no longer writes outside the allocated buffer: Before this update, the DNS resolver in the GNU C Library did not correctly validate buffer boundaries when it processed TSIG records. As a consequence, a crafted TSIG record could trigger an out-of-bounds write and cause memory corruption. With this update, the buffer boundaries are validated correctly. As a result, TSIG record processing no longer writes outside the allocated buffer. For more information, see https://access.redhat.com/security/cve/cve-2026-5435. * Crafted DNS responses no longer cause a crash or an uninitialized memory read: Before this update, the DNS resolver in the GNU C Library did not correctly handle malformed responses. As a consequence, a crafted DNS response could cause an application to read uninitialized memory or terminate unexpectedly. With this update, malformed responses are handled correctly. As a result, the affected applications no longer crash or read uninitialized memory. For more information, see https://access.redhat.com/security/cve/cve-2026-6238. Known issues: * None
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-5435

A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le —
Vendor Fix fix
Threats
Impact Moderate
CVE-2026-5928

A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.

5.0 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le —
Vendor Fix fix
Workaround
Threats
Impact Moderate
CVE-2026-6238

A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.

6.5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE-1284 - Improper Validation of Specified Quantity in Input
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le —
Vendor Fix fix
Threats
Impact Moderate
CVE-2026-39821

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.

8.2 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CWE-1289 - Improper Validation of Unsafe Equivalence in Input
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-39822

A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le —
Vendor Fix fix
Workaround
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:44624 self
https://access.redhat.com/security/cve/CVE-2026-39821 external
https://access.redhat.com/security/cve/CVE-2026-39822 external
https://access.redhat.com/security/cve/CVE-2026-5435 external
https://access.redhat.com/security/cve/CVE-2026-5928 external
https://access.redhat.com/security/cve/CVE-2026-6238 external
https://access.redhat.com/security/updates/classi… external
https://docs.redhat.com/en/documentation/openshif… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-5435 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463465 external
https://www.cve.org/CVERecord?id=CVE-2026-5435 external
https://nvd.nist.gov/vuln/detail/CVE-2026-5435 external
https://inbox.sourceware.org/libc-announce/7a655d… external
https://sourceware.org/bugzilla/show_bug.cgi?id=34033 external
https://access.redhat.com/security/cve/CVE-2026-5928 self
https://bugzilla.redhat.com/show_bug.cgi?id=2459854 external
https://www.cve.org/CVERecord?id=CVE-2026-5928 external
https://nvd.nist.gov/vuln/detail/CVE-2026-5928 external
https://sourceware.org/bugzilla/show_bug.cgi?id=33998 external
https://access.redhat.com/security/cve/CVE-2026-6238 self
https://bugzilla.redhat.com/show_bug.cgi?id=2463539 external
https://www.cve.org/CVERecord?id=CVE-2026-6238 external
https://nvd.nist.gov/vuln/detail/CVE-2026-6238 external
https://sourceware.org/bugzilla/show_bug.cgi?id=34069 external
https://access.redhat.com/security/cve/CVE-2026-39821 self
https://bugzilla.redhat.com/show_bug.cgi?id=2480756 external
https://www.cve.org/CVERecord?id=CVE-2026-39821 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39821 external
https://go.dev/cl/767220 external
https://go.dev/issue/78760 external
https://groups.google.com/g/golang-announce/c/iI-… external
https://pkg.go.dev/vuln/GO-2026-5026 external
https://access.redhat.com/security/cve/CVE-2026-39822 self
https://bugzilla.redhat.com/show_bug.cgi?id=2498152 external
https://www.cve.org/CVERecord?id=CVE-2026-39822 external
https://nvd.nist.gov/vuln/detail/CVE-2026-39822 external
https://go.dev/cl/797880 external
https://go.dev/issue/79005 external
https://groups.google.com/g/golang-announce/c/Orm… external
https://pkg.go.dev/vuln/GO-2026-4970 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 has been released",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* None\n\n\nBug fixes:\n\n* Punycode labels are no longer processed incorrectly: Before this update, the golang.org/x/net/idna package incorrectly processed certain Punycode labels during internationalized domain name conversion. As a consequence, an attacker could craft a domain name that resolved to a different host than the one that was validated, which could lead to privilege escalation. With this update, Punycode labels are processed correctly. As a result, converted domain names match the validated input. For more information, see https://access.redhat.com/security/cve/cve-2026-39821.\n\n* The os.Root type no longer follows symbolic links outside of its root: Before this update, the Go os package did not correctly restrict some operations performed through an os.Root value. As a consequence, an attacker who controlled a symbolic link inside the root directory could traverse outside of it and access files elsewhere on the file system. With this update, operations on an os.Root value are correctly confined to the root directory. As a result, symbolic links can no longer be used to escape the root. For more information, see https://access.redhat.com/security/cve/cve-2026-39822.\n\n* The ungetwc function no longer mishandles specific wide character encodings: Before this update, the ungetwc function in the GNU C Library mishandled certain wide character encodings. As a consequence, an application could disclose information or terminate unexpectedly. With this update, the wide character encodings are handled correctly. As a result, the affected applications no longer disclose information or crash. For more information, see https://access.redhat.com/security/cve/cve-2026-5928.\n\n* TSIG record processing no longer writes outside the allocated buffer: Before this update, the DNS resolver in the GNU C Library did not correctly validate buffer boundaries when it processed TSIG records. As a consequence, a crafted TSIG record could trigger an out-of-bounds write and cause memory corruption. With this update, the buffer boundaries are validated correctly. As a result, TSIG record processing no longer writes outside the allocated buffer. For more information, see https://access.redhat.com/security/cve/cve-2026-5435.\n\n* Crafted DNS responses no longer cause a crash or an uninitialized memory read: Before this update, the DNS resolver in the GNU C Library did not correctly handle malformed responses. As a consequence, a crafted DNS response could cause an application to read uninitialized memory or terminate unexpectedly. With this update, malformed responses are handled correctly. As a result, the affected applications no longer crash or read uninitialized memory. For more information, see https://access.redhat.com/security/cve/cve-2026-6238.\n\n\nKnown issues:\n\n* None",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:44624",
        "url": "https://access.redhat.com/errata/RHSA-2026:44624"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39822",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39822"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5435",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5435"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-5928",
        "url": "https://access.redhat.com/security/cve/CVE-2026-5928"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6238",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6238"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo",
        "url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_44624.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 release",
    "tracking": {
      "current_release_date": "2026-07-24T12:54:52+00:00",
      "generator": {
        "date": "2026-07-24T12:54:52+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.7"
        }
      },
      "id": "RHSA-2026:44624",
      "initial_release_date": "2026-07-23T18:45:28+00:00",
      "revision_history": [
        {
          "date": "2026-07-23T18:45:28+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-23T18:45:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-24T12:54:52+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift distributed tracing 3.10.2",
                "product": {
                  "name": "Red Hat OpenShift distributed tracing 3.10.2",
                  "product_id": "Red Hat OpenShift distributed tracing 3.10.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift distributed tracing"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-operator-bundle@sha256%3A40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-operator-bundle\u0026tag=1784777166"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1784775770"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1784775834"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Addb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1784775772"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9-operator@sha256%3A0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1784775782"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-query-rhel9@sha256%3A4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1784775793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9@sha256%3Abc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1784775768"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1784775770"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3Ab911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1784775834"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1784775772"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9-operator@sha256%3Afefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1784775782"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-query-rhel9@sha256%3A50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1784775793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9@sha256%3Acdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1784775768"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1784775770"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
                  "product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1784775834"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Aebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1784775772"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9-operator@sha256%3A948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1784775782"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
                  "product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-query-rhel9@sha256%3A8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1784775793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9@sha256%3Ad95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1784775768"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1784775770"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
                  "product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1784775834"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
                  "product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Afaf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1784775772"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9-operator@sha256%3Ad1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1784775782"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
                  "product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-query-rhel9@sha256%3A2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1784775793"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
                "product": {
                  "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
                  "product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/tempo-rhel9@sha256%3A1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1784775768"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.2",
          "product_id": "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le",
        "relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.10.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-5435",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-04-28T14:01:44.684432+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463465"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG (Transaction Signature) records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Out-of-bounds write via TSIG record processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463465",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463465"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5435",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5435"
        },
        {
          "category": "external",
          "summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
          "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34033"
        }
      ],
      "release_date": "2026-04-28T11:58:54.962000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-23T18:45:28+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:44624"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Out-of-bounds write via TSIG record processing"
    },
    {
      "cve": "CVE-2026-5928",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-20T21:01:38.811304+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2459854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc (GNU C Library). When the `ungetwc` function is called on a file stream using wide characters with specific overlapping single-byte and multi-byte encodings, it may attempt to read data outside of its allocated buffer. This can lead to the unintentional disclosure of sensitive information from memory or cause the program to crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "RHBZ#2459854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5928",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5928"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33998"
        }
      ],
      "release_date": "2026-04-20T20:37:31.743000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-23T18:45:28+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:44624"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings"
    },
    {
      "cve": "CVE-2026-6238",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-04-28T19:09:30.721026+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463539"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in glibc (GNU C Library). The deprecated functions ns_printrrf, ns_printrr, and fp_nquery do not properly validate the length of RDATA (Resource Record Data) in a DNS (Domain Name System) response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could craft a malicious DNS response, leading to a target application crashing or reading uninitialized memory. These functions are intended for application debugging and are not part of the standard DNS resolver path.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463539",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463539"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6238"
        },
        {
          "category": "external",
          "summary": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
          "url": "https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"
        },
        {
          "category": "external",
          "summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069",
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=34069"
        }
      ],
      "release_date": "2026-04-28T16:43:08.526000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-23T18:45:28+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:44624"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response"
    },
    {
      "cve": "CVE-2026-39821",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-22T16:00:52.844126+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/767220",
          "url": "https://go.dev/cl/767220"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/78760",
          "url": "https://go.dev/issue/78760"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
          "url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5026",
          "url": "https://pkg.go.dev/vuln/GO-2026-5026"
        }
      ],
      "release_date": "2026-05-22T15:01:21.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-23T18:45:28+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:44624"
        },
        {
          "category": "workaround",
          "details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
    },
    {
      "cve": "CVE-2026-39822",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2026-07-08T17:01:53.592869+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2498152"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "os: golang: Go os.Root: Symlink following vulnerability allows directory traversal",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
          "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39822"
        },
        {
          "category": "external",
          "summary": "RHBZ#2498152",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/797880",
          "url": "https://go.dev/cl/797880"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79005",
          "url": "https://go.dev/issue/79005"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
          "url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-4970",
          "url": "https://pkg.go.dev/vuln/GO-2026-4970"
        }
      ],
      "release_date": "2026-07-08T15:46:27.199000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-23T18:45:28+00:00",
          "details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:44624"
        },
        {
          "category": "workaround",
          "details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
          "product_ids": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5d37a9295fcff51eae08cfda93f8fd9150ed8481bf65a71744ad5535b861225d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ddb66284889add51287b8d61052bd00d8a0ef516fbc0829a2a4b4b99bdeba5fc_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:ebb47074d9e7e06f56284253edaefb60ed4bf5efc1c3cecf9f4c49edeaf3a209_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:faf4ba531c623ea0d19755b77f2138dbaa43a51a0775b4ee02d1225316dc654c_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:0df194c5cb39115f89e8df733e39d94ea12c834fa9e8a29198a8a5cdb84553e0_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:28219c674953a66c96fe7db3c684c26829a295f3ba1ded42f739124c2da040ba_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:52c3188a11918718364db6dd46fb1b9cfcdd06bb83e6262b874368a5d9c3242d_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:90d32605a91f99e3bf54577014cb33bc19afb96f6f3e47b8b00cd5e2628512f3_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:10a722d4a344473cbcf8c808800328d4f7ebed295defeb5c415e17e0398b0b5b_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:390785f43baa818e969bc4deff6734ef30cbabb442acf0c40af205caece7b3cd_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6818877323264424695b25c3353b506b659424d07f55f128a3add92c32ca9747_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:b911ca02d5b6503b37854c840be1cd1abb08a66160ab5a5a7a9d0d77881739ca_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:40c77256530f670a5951bb76fd98780b04756f5bc533c885dcd227a0155ad303_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:2ba02d10898f9d23098f89fdcc873ca2902159d598077a8a793cde6924ea0ea2_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:4043b1f73650dae9fbaa0f68eb50930011763abeab0f123f04a2c849fd413023_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:50d6dd1edf4bf2cbf4cc03946d0ea3db17b5a7b72b8ff827a0be7a0981403c4d_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:8e2efa2a279952d22dba9703d08ea887121a969b045923764063a10f167a3412_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:0ff040679a174fa9d9d23042349d5071dae8c7e7091dccce4c6ee2123a69ae35_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:948718d12957aca408a173259fda1151e30644d6423eeed740ea21d7f7bb2262_ppc64le",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:d1ecde6e98b112a31d78156b1df2490eb4529e46f52b3a5253680c8ad0ce0e6a_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fefa59c75182e18ec20e3efe5acd1456e113c36e3347fae4fe457d5bde7761f1_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:1fd5fdd5a09d85f2cce8ab19726e68606af7a45012bfc0a7a9f8aa9af2cee255_s390x",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:bc2a9f9b0174d8bb70d6ce582c197bf2c397f0b9be70df5d32cdecbc352665a4_amd64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:cdf828754abcd22e000f52ecabc500ac632cc2a46280332f49ebf8fd4e479387_arm64",
            "Red Hat OpenShift distributed tracing 3.10.2:registry.redhat.io/rhosdt/tempo-rhel9@sha256:d95e74f5a3c907455a884c5a0c23bdf668e4a8dcea44c124bf8c862daf6237f9_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "os: golang: Go os.Root: Symlink following vulnerability allows directory traversal"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.