Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.7.0 release

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products26

• Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:1d04cc80ad01b912e143f714702a604979ee83f4037b72663618637f0e77fd0b_s390x as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:40922fdd421a4e9c1c14f1d05045d65e6d08d9dfbad372bcab97b637383f53d4_amd64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:4b1cce1957fa69b7f3f3cd86abf347e30aa5d53a1a308d4fe8f6b09f14d95aef_arm64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:62b57fedbfb477fdee21ed6362d4dfdc16e542526eb18e5f3e59f1082f82fa0a_ppc64le as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:43057cca6db4491d95db1d865cdb2eff2caec367fd9ca58f6461f9952f733d84_amd64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:71e7905984658a2160cf0a50b1cfd8e1426836948b5f3d1e5eee98938367948a_s390x as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:c5553c3a735a969a7dbf2dea828f5835cac2b1df9c9c6776ca3d4cd7a092153d_arm64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:d0cfcc7dec9ed6d01efa53d5db7cbd39820e35ddf832fe9db4c1ee9bf0bc36ac_ppc64le as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:044141c80f657913f218d2363aeccbc2d2571fb2a207830e63e47836162f0850_amd64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:066beafc62aaaa24d851394da17a4e31b3590074ba10bccae65ad0ba51f66576_s390x as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:11e05573aa592a55b24338a9ed044b44dac8e6f7197f970845a122ac555ae104_ppc64le as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:4c0fe993669ff8583e3c2b3eda2ebd6819799869f40f93e4664eca7a6fe9da03_arm64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:bcc3521d20a1662d4032901f46e3bd4744c9910b060f52bdf10c6a8dfea1276b_amd64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:06aceed4489f2775250050e9c0a97dbd0213eec023e25302d81cdcfd236406ef_ppc64le as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:0cb8089183b98b3e0f88bf7889fe273bf7ce5aaf9be724841d5ec10f64850c27_amd64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:44adfb0ca086be0d8b08586aa525416ea886adcda83acc1d68fe6a2cd37c16a1_arm64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:78797b121dcdf1be79c6ba8824254c5e27ec18467e0872a493a675a373d8a9ef_s390x as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:3e3e58c2af0674641e4bc099c93413f8680ad82616ad3bc76b4c485aad8c778a_amd64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:7c6d81ad059d06a3b302af4534f3a9ac41f933321948ddb8f3379ab9f27bdb18_s390x as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:dc0b9260b2854da1b71320f6e707044de10f25d307d13f1c84a6fc9c13537f52_ppc64le as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:f0d6e4fd765ebab50f9c208f40ec485b7d6d169e49171f81afcafcc4252a20b5_arm64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8@sha256:857b3bb9abb2b67c2fbde63d28651379c22b7e417a06f157c30d4c20b60004a8_amd64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8@sha256:956a4e80d64bb8a0e745c45ee260f3bc531d9006501f76f23ec4dc35d0282d07_ppc64le as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8@sha256:d8d259d3a1e47685bace6c824b3cc5fb1ac936d4a3ee607a3805797032d3af90_arm64 as a component of Red Hat OpenShift distributed tracing 3.7.0
• registry.redhat.io/rhosdt/tempo-rhel8@sha256:ed934b506edd780006adf9e279f0758f959c2fa326c5bf0eb4bcf47ac791a4e2_s390x as a component of Red Hat OpenShift distributed tracing 3.7.0

✅ Remediation

For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators

🔗 References (5)

• selfhttps://access.redhat.com/errata/RHSA-2025:17043
• externalhttps://access.redhat.com/security/cve/CVE-2025-22874
• externalhttps://access.redhat.com/security/updates/classification/
• externalhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17043.json