Issued:

2025-11-05

Updated:

2025-11-05

RHSA-2025:19807 - Red Hat OpenShift distributed tracing platform Tempo - 3.7.1 release

Synopsis

Red Hat OpenShift distributed tracing platform (Tempo) 3.7.1 release

Type/Severity

Security Advisory Moderate

Topic

Red Hat OpenShift distributed tracing platform (Tempo) 3.7.1 has been released

Description

This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements.

Breaking changes:

• Nothing

Deprecations:

• Nothing

Technology Preview features:

• Nothing

Enhancements:

• Nothing

Bug fixes:

• https://access.redhat.com/security/cve/CVE-2025-5318

Known issues:

• In the Jaeger UI, clicking on Trace and refreshing the page, or accessing Trace > Trace Timeline > Trace JSON from the Tempo query frontend, might result in the Tempo query pod failing with an EOF error. To work around this problem, use the distributed tracing UI plugin to view traces.

Solution

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators

Affected Products

Fixes

(none)

CVEs

(none)

References

• https://access.redhat.com/security/cve/CVE-2025-5318

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.