RHSA-2026:79368HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.2 release

Published
October 8, 2026
Last Modified
October 30, 2026

🔗 CVE IDs covered (4)

CVE-2026-94637 →CVE-2026-63209 →CVE-2026-83663 →CVE-2026-84445 →

📋 Description

CVE-2026-63209 — github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing CVE-2026-83663 — github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-94637 — github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data

🎯 Affected products26

  • Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:41c67c61891d9840f0a26fbd6ff6fb5e8fcd23dfbdb6be1fd094d4fa620c1a73_amd64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:52c0b0ba51b1693fd9a432430043b6bab3acdc00b194dba14c161d86689ef741_arm64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:9766f2a2219e8f34d4a5248f6c01d9b419a46b397f529792e4f27508d95186a7_s390x as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-opa-rhel9@sha256:b182e678aa6895f220638437c3363cef7071ac358723f656c1bca5f68da120b1_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:3b9b141e6bb0e3719d4849b50cac3d4bb5dff70d0f9c7facf9a1c3959c39809a_amd64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:9fe2e78239cb9ebc887da81942caad4bdc158aa7de85a70d34d3f3d6bf81b777_s390x as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:ecc7580567c2cba4d4713cf1150199602d5e1e32fc3dbcff94c919ef8284793e_arm64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-gateway-rhel9@sha256:f38c3b495fc40edd240b25cc817d5df765cafae7df78af74dc477644d0b85c85_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:1f6a0b8a1494cdf6e986b3f44a1c95166b0202493729b16d8186222f1383012e_amd64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6d0353c813fbdb73419cda2ebfa7eeebe4e365347987e36d7a01048190cd4256_s390x as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:6f116a598079751c5efb6adf8a8d3a66751ce18e83ae9602b8b82e6b5a1d5a91_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-jaeger-query-rhel9@sha256:e0da8cf3f8b289cc101db40133f61da49ef83acfcfb4a2e27943c5b7d7d15517_arm64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a0080dbd55d476469c23c601acb8eaadc7ba76ffae1fa54a6de3cee80f57884a_amd64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:0eebef370f834b7d69dd8490f0b1bc527c831733a5d720bed1e3dc52e6ee36bc_arm64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:12733ff41a66660b8a2b5f4237252ccef19ebfb79e45fcbc9781cc20c2c53e91_amd64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:1bc2b104522c69db59de3b978e011d1e456177c447d6cba375e08a696feaac06_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-query-rhel9@sha256:ad854742100555bc55b7d0094f6a6c8857db9608cbc143d156cfffe2834f0936_s390x as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:62cb818fb9f042e93882653553b05ac93ab4af6f53cc76e06961431bd0d29777_amd64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:6926706aae8b7962090ecbcbef8a5a14b202ec664af46da459b4b973a8f96cc0_arm64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:cfe1f26d6241897ea7fbe1d48bf8aa3023661c040e2f6e68951c2dfb68610b04_s390x as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9-operator@sha256:fe9b9952255c38623d4137d53c97e8f5be1c53d194852879cd7a1ed4bde221fc_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:0865876c71ccc7fdc1b2a2d196e0696775b138d20500975a2a1c27eed664921f_amd64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:66b90ca83a097215b05c52a51416b4bb14aa9bf87d628fdb9e99bf9af85f4434_arm64 as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:778ac8fe3f23af9d4fb0ffcebe42d2d5286da1c404dd4ca47f0d4171ce5d426d_s390x as a component of Red Hat OpenShift distributed tracing 3.11
  • registry.redhat.io/rhosdt/tempo-rhel9@sha256:b7a84d7f6791d7cbb921e69096ceee27f2a7fcd820de228bcd71672fb8e42162_ppc64le as a component of Red Hat OpenShift distributed tracing 3.11

✅ Remediation

For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (8)