RHSA-2026:27126HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.0 release

Published
June 18, 2026
Last Modified
August 19, 2026

🔗 CVE IDs covered (3)

CVE-2025-48431 →CVE-2026-32281 →CVE-2026-43869 →

📋 Description

CVE-2025-48431 — Apache Thrift: c_glib: Apache Thrift c_glib: Denial of Service via specially crafted requests CVE-2026-32281 — crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-43869 — Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation

🎯 Affected products26

  • Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:5cd85eb3e3db8bc1e9c6f4fabce36953900a458146b7ce708aa0855fcd7a0d8c_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:648a86d94ec347c50f841c2c29e42757c292dc524ab6846fcd5e8e042b62eaff_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:e5d2a94a4e349cc95a0e986b53ce84c465ab4db979ef744fa440b6c0c0e0d470_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:f889ac6aa2e58468186f26e23bbccb138a6a447812c5cd10f27abac59bbff66a_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:6d1a2f14570e24fdf67ead3be0f1009367de068cca2aabb52f208ab7de2f75cb_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:93d0e97f5a2e3a912b278e441ba0d5a12dfbaec7b5fbc74e0024370682835db8_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:964eb3aec90a5349573cf9051fd8216235f5df75df60cefa1be7169798405593_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ed07d775c269c34ade7d6542e767fecba8d8400e7b4dcf89ffd28dda78cab24c_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:0f3850087eaba5ed9eeb72d17daa80e9e54949ae8784b3188aab230f91972ba0_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6ce0e7e216cd3ebde9e52aaefdb075be1b50a237ad0842b312f8ff57cc99bc0e_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:741666990f423912210682fd1f01ccff3443a1a9e7a364ee46fb6c72f0ed2c1b_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:8a117249236408257bf19cb9d600b03c851b94fa072acccef8ed1ebc18164354_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:03cbea46e6fb4147cb6bcdccd049a1609d3f66901cb125363c52bb821a8ade47_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:6cbf17cad7cf17d49fa078900b19ef9cf4bc6465d259d75fb9137379445df991_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:7b3f78b81dd82c64012c2ef2b2c05dd9fbad2cb270f24fcdf592e606cdc4636e_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:a13fff512de7b06cce174b386e4f1804ea3a146e3a062a22f10e5dfc509daa7a_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:fbe636335dbd0fac4680252d9240115207d8f0753c921d990df4aedbf9c0dbdf_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:72027f041985f99327ea415ee17139770d8d0bdcf7baf13b59591c60fb585b33_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:982cc78ad2616cbed77c2465d51fa61b78e54021ad84e8ecfd9b4aef80f6e39f_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:a72d0e29b18d3ef6cd8ec6fcfc047cbd51e7506ec8132530b6df89ea7c6fa912_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:bd369ccca53dc35702aad962ae86918076cbe113326d9e09589b2d3324e23bfa_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:49b701eaa9a8c0f97a4a2982b20ee510f294f0c7e06800890c953b98d3f1eebe_amd64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:4b79a6b2a5bd9cf17fe24da802779ae87710e522aeb3538007cf8c2326af2b39_ppc64le as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:8f3b20e29544cc58f8256df89322847fbbaca8e7292d1235da0be9b126d25a90_arm64 as a component of Red Hat OpenShift distributed tracing 3.10.1
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:f1be50dfd7e9621bee928080a8f6f6fc0c9fb37e8c93931926faf4e5b50f1052_s390x as a component of Red Hat OpenShift distributed tracing 3.10.1

✅ Remediation

For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (7)