RHSA-2026:88187
Vulnerability from csaf_redhat - Published: 2026-10-22 11:10 - Updated: 2026-11-03 09:55Summary
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 release
Severity
Important
Notes
Topic: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 has been released
Details: This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides new features and security improvements.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* This release upgrades Tempo to version 2.10.10.
Bug fixes:
* None
Known issues:
* None
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in mcp-go. The HTTP server implementation does not restrict the size of incoming HTTP POST request bodies before buffering them into memory. A remote, unauthenticated attacker can exploit this vulnerability by sending excessively large or multiple concurrent requests, causing memory exhaustion and leading to a Denial of Service (DoS) when the server crashes.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.
6.8 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64 | — |
Workaround
|
Threats
Impact
Important
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 has been released",
"title": "Topic"
},
{
"category": "general",
"text": "This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides new features and security improvements.\n\n\nBreaking changes:\n\n* None\n\n\nDeprecations:\n\n* None\n\n\nTechnology Preview features:\n\n* None\n\n\nEnhancements:\n\n* This release upgrades Tempo to version 2.10.10.\n\n\nBug fixes:\n\n* None\n\n\nKnown issues:\n\n* None",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:88187",
"url": "https://access.redhat.com/errata/RHSA-2026:88187"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-108859",
"url": "https://access.redhat.com/security/cve/CVE-2026-108859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-111943",
"url": "https://access.redhat.com/security/cve/CVE-2026-111943"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88187.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 release",
"tracking": {
"current_release_date": "2026-11-03T09:55:23+00:00",
"generator": {
"date": "2026-11-03T09:55:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:88187",
"initial_release_date": "2026-10-22T11:10:03+00:00",
"revision_history": [
{
"date": "2026-10-22T11:10:03+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-22T11:10:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-03T09:55:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift distributed tracing 3.11",
"product": {
"name": "Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_distributed_tracing:3.11::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift distributed tracing"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1792610888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Aa332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Aabd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1792610843"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Af917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1792610900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5?arch=s390x\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1792610881"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1792610881"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-operator-bundle@sha256%3Aa33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-operator-bundle\u0026tag=1792660298"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3Afb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Ac8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1792610843"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1792610900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3A347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06?arch=amd64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1792610888"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3Ad98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3A92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1792610843"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3Abc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1792610900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3Adc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1792610888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3A5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47?arch=arm64\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1792610881"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-rhel9@sha256%3A88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-jaeger-query-rhel9@sha256%3A4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9\u0026tag=1792610901"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-gateway-opa-rhel9@sha256%3Ae19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9\u0026tag=1792610843"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9-operator@sha256%3A3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9-operator\u0026tag=1792610900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-query-rhel9@sha256%3Ab9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-query-rhel9\u0026tag=1792610888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le",
"product": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le",
"product_id": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/tempo-rhel9@sha256%3Ab585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619?arch=ppc64le\u0026repository_url=registry.redhat.io/rhosdt/tempo-rhel9\u0026tag=1792610881"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64 as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11",
"product_id": "Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
},
"product_reference": "registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift distributed tracing 3.11"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-108859",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-11T13:41:05.673476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2549285"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in mcp-go. The HTTP server implementation does not restrict the size of incoming HTTP POST request bodies before buffering them into memory. A remote, unauthenticated attacker can exploit this vulnerability by sending excessively large or multiple concurrent requests, causing memory exhaustion and leading to a Denial of Service (DoS) when the server crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/mark3labs/mcp-go: mcp-go: Denial of Service via unbounded HTTP request body buffering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having an Important severity because an unauthenticated remote attacker can cause an immediate denial of service by exhausting host memory without requiring privileges or user interaction. In affected Red Hat products, such as Red Hat OpenShift distributed tracing and Red Hat Connectivity Link, applications exposing the streamable HTTP endpoint to untrusted network traffic can be terminated by out-of-memory errors when processing oversized payloads. The vulnerability solely impacts service availability, with no compromise to data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-108859"
},
{
"category": "external",
"summary": "RHBZ#2549285",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2549285"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-108859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-108859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-108859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108859"
},
{
"category": "external",
"summary": "https://github.com/mark3labs/mcp-go",
"url": "https://github.com/mark3labs/mcp-go"
},
{
"category": "external",
"summary": "https://github.com/mark3labs/mcp-go/blob/90d247ed8d45cbb7d71d9a95e112789b78760443/server/streamable_http.go#L405-L411",
"url": "https://github.com/mark3labs/mcp-go/blob/90d247ed8d45cbb7d71d9a95e112789b78760443/server/streamable_http.go#L405-L411"
},
{
"category": "external",
"summary": "https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/mark3labs-mcp-go-streamable-http-unbounded-body",
"url": "https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/mark3labs-mcp-go-streamable-http-unbounded-body"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/mcp-go-through-1.2.1-denial-of-service-via-unbounded-post-body-buffering",
"url": "https://www.vulncheck.com/advisories/mcp-go-through-1.2.1-denial-of-service-via-unbounded-post-body-buffering"
}
],
"release_date": "2026-10-11T13:26:06.450000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T11:10:03+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88187"
},
{
"category": "workaround",
"details": "Restrict network exposure of the affected service to trusted clients or place it behind an intermediate reverse proxy or ingress controller that enforces strict HTTP request body size limits.\n\n1. Firewall configuration (for standalone host deployments):\nLimit access to the listening port to trusted subnets:\n```\nfirewall-cmd --permanent --zone=trusted --add-source=\u003cTRUSTED_IP_OR_CIDR\u003e\nfirewall-cmd --reload\n```\n\n2. OpenShift / Kubernetes environments:\nApply an OpenShift NetworkPolicy to restrict ingress traffic targeting the affected pods exclusively to authorized namespaces or ingress components. Additionally, configure ingress controllers or reverse proxies to limit maximum client request body sizes, dropping oversized POST requests before they reach backend services.\n\nCaveats:\nRestricting access to trusted networks will prevent unauthorized or external clients from accessing the service. Setting strict payload thresholds at the proxy layer may reject legitimate client requests that exceed the defined maximum size.\n\nWarning:\nRunning `firewall-cmd --reload` reloads active firewall configurations and can temporarily disrupt existing network connections.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/mark3labs/mcp-go: mcp-go: Denial of Service via unbounded HTTP request body buffering"
},
{
"cve": "CVE-2026-111943",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-10-20T09:38:36.160000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2556068"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important because Go applications validating TLS certificates could accept unauthorized certificates issued by distrusted intermediate Certificate Authorities, potentially compromising the integrity and confidentiality of secure network communications. Any Go-based client or server relying on standard certificate verification may be exposed to man-in-the-middle attacks if an attacker intercepts traffic using certificates derived from these intermediate keys. Exploitation requires specific network positioning and certificates generated by the untrusted intermediate authorities, limiting opportunistic widespread abuse.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-111943"
},
{
"category": "external",
"summary": "RHBZ#2556068",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556068"
},
{
"category": "external",
"summary": "RHSB-2026-012",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-111943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111943"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111943"
},
{
"category": "external",
"summary": "https://github.com/golang/go/issues/82345",
"url": "https://github.com/golang/go/issues/82345"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU",
"url": "https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6809",
"url": "https://pkg.go.dev/vuln/GO-2026-6809"
}
],
"release_date": "2026-10-20T02:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T11:10:03+00:00",
"details": "For details on how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88187"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:92026ec0560a465c05e285977c77bd4761f118a3ac2cb472e31c723d4d501d04_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:abd3f80e68912485fdfb5b382f5886af8569ddf037824d64e19a137f5cd865ef_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:c8dd50e5afa16d81b7489805589d5515ae6b2c8b745b95f58381f2d04d45e6c5_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e19d95b90ef76594d56791c85587c3c92f86f880e4517e6913fca2edf7bee430_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:8820adea0a78175001803e4f4f102fbaa706959d963a32ab3a7f654e066cf73c_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:88c6450188c013d8c4230e75f3d5bf1e6068a84483ca64ab431aabf6b986ff61_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:a332750c6d7b9a74749b2dec8861b986bf06d05c869b2cf5223c50f9216f0763_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:fb6bd2afe9d280a29fcb1bee4da5d85ada4d5e5b5193c4bdb8424e3dc5f45d6c_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:34f32a65dba4fba0728b630b49bb4071375eb765d53a84a1593751b4d5709880_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:4f6bfa54ff0642e3366990a3427e26d2ce520e41bccb44c9291e37715572fefb_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:75d1a267305e36a2f80c257180e6f7e3f427c056cd63b9b167afc6b3138ab944_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:d98f66d5415a5ea6d05ca0a2adadcf64cfcff5f0535bdf73e5ea943489d63a70_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a33974d5850474d2f7fbb84389a99f04679cf8fcfcea7a03d455aa9026448e13_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:347c0ae905b7ca2ce09ff1ba087fbcbf1dc1c3ed8ac5b82fac4e87b732f3ad06_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:675c58075ffa273b2a6bb78ce399a002edf1a995e7a399d959a8f4c3679c1f1d_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:b9b38242740170590a4adfc0bbe02428e65940f60c76116249f6cbdcbeb7ee6c_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:dc92afea74b2afb28a0b9f27123e7416db3eac89346b0054d09c407f504d56d9_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:3a6cdb86a67fd6708f937bac3f97917fa92abfe291951c33a14601b7acde36f8_ppc64le",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:7f7ee660db5135ba01e9b7de437c73b10d5baf83480ec07fd11861520929f2e3_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bc88d94bff554a1c8cc2ed671648854dbf0729fe0994b160b8b0536888c847ef_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:f917c2bd65b16337d59f414e0e621762ae870142034bf7672fad34f5433fbab3_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:12a1d493d34e0396283ab234f664849660ba06c2cd650b72e10676b02d83f0e5_s390x",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:343fb622b86271cde9d5c5c2fd9b9ed6765bac13cb0ab251649b3029df30a0d9_amd64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:5a667ccd58c083b562a159aeb6476dbec3136258c74c5fa43eed5322de95fc47_arm64",
"Red Hat OpenShift distributed tracing 3.11:registry.redhat.io/rhosdt/tempo-rhel9@sha256:b585a15d886cec86d2b36a5b4ab763730f666ba59145fbc716f023280685a619_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.