- Issued:
- 2025-09-30
- Updated:
- 2025-09-30
RHSA-2025:17043 - Security Advisory
Synopsis
Red Hat OpenShift distributed tracing platform (Tempo) 3.7.0 release
Type/Severity
Security Advisory: Important
Topic
Red Hat OpenShift distributed tracing platform (Tempo) 3.7.0 has been released
Description
This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides new features, security improvements, and bug fixes.
Breaking changes:
- Nothing
Deprecations:
- Nothing
Technology Preview features:
- Nothing
Enhancements:
- With this update, the Tempo Operator creates a network policy for the operator to restrict access to the used APIs.
Bug fixes:
Known issues:
- In the Jaeger UI, clicking on Trace and refreshing the page, or accessing Trace > Trace Timeline > Trace JSON from the Tempo query frontend,
might result in the Tempo query pod failing with an EOF error. To work around this problem, use the distributed tracing UI plugin to view traces.
Solution
For details on how to apply this update, refer to:
Fixes
- TRACING-5372 - Add network policies for Tempo operator
CVEs
amd64
| registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:bcc3521d20a1662d4032901f46e3bd4744c9910b060f52bdf10c6a8dfea1276b |
| registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:43057cca6db4491d95db1d865cdb2eff2caec367fd9ca58f6461f9952f733d84 |
| registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:044141c80f657913f218d2363aeccbc2d2571fb2a207830e63e47836162f0850 |
| registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:40922fdd421a4e9c1c14f1d05045d65e6d08d9dfbad372bcab97b637383f53d4 |
| registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:3e3e58c2af0674641e4bc099c93413f8680ad82616ad3bc76b4c485aad8c778a |
| registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:0cb8089183b98b3e0f88bf7889fe273bf7ce5aaf9be724841d5ec10f64850c27 |
| registry.redhat.io/rhosdt/tempo-rhel8@sha256:857b3bb9abb2b67c2fbde63d28651379c22b7e417a06f157c30d4c20b60004a8 |
arm64
| registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:c5553c3a735a969a7dbf2dea828f5835cac2b1df9c9c6776ca3d4cd7a092153d |
| registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:4c0fe993669ff8583e3c2b3eda2ebd6819799869f40f93e4664eca7a6fe9da03 |
| registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:4b1cce1957fa69b7f3f3cd86abf347e30aa5d53a1a308d4fe8f6b09f14d95aef |
| registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:f0d6e4fd765ebab50f9c208f40ec485b7d6d169e49171f81afcafcc4252a20b5 |
| registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:44adfb0ca086be0d8b08586aa525416ea886adcda83acc1d68fe6a2cd37c16a1 |
| registry.redhat.io/rhosdt/tempo-rhel8@sha256:d8d259d3a1e47685bace6c824b3cc5fb1ac936d4a3ee607a3805797032d3af90 |
ppc64le
| registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:d0cfcc7dec9ed6d01efa53d5db7cbd39820e35ddf832fe9db4c1ee9bf0bc36ac |
| registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:11e05573aa592a55b24338a9ed044b44dac8e6f7197f970845a122ac555ae104 |
| registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:62b57fedbfb477fdee21ed6362d4dfdc16e542526eb18e5f3e59f1082f82fa0a |
| registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:dc0b9260b2854da1b71320f6e707044de10f25d307d13f1c84a6fc9c13537f52 |
| registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:06aceed4489f2775250050e9c0a97dbd0213eec023e25302d81cdcfd236406ef |
| registry.redhat.io/rhosdt/tempo-rhel8@sha256:956a4e80d64bb8a0e745c45ee260f3bc531d9006501f76f23ec4dc35d0282d07 |
s390x
| registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:71e7905984658a2160cf0a50b1cfd8e1426836948b5f3d1e5eee98938367948a |
| registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:066beafc62aaaa24d851394da17a4e31b3590074ba10bccae65ad0ba51f66576 |
| registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:1d04cc80ad01b912e143f714702a604979ee83f4037b72663618637f0e77fd0b |
| registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:7c6d81ad059d06a3b302af4534f3a9ac41f933321948ddb8f3379ab9f27bdb18 |
| registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:78797b121dcdf1be79c6ba8824254c5e27ec18467e0872a493a675a373d8a9ef |
| registry.redhat.io/rhosdt/tempo-rhel8@sha256:ed934b506edd780006adf9e279f0758f959c2fa326c5bf0eb4bcf47ac791a4e2 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
