Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2025:19807 - Security Advisory
Issued:
2025-11-05
Updated:
2025-11-05

RHSA-2025:19807 - Security Advisory

  • Overview
  • Updated Images

Synopsis

Red Hat OpenShift distributed tracing platform (Tempo) 3.7.1 release

Type/Severity

Security Advisory: Moderate

Topic

Red Hat OpenShift distributed tracing platform (Tempo) 3.7.1 has been released

Description

This release of the Red Hat OpenShift distributed tracing platform (Tempo) provides security improvements.

Breaking changes:

  • Nothing

Deprecations:

  • Nothing

Technology Preview features:

  • Nothing

Enhancements:

  • Nothing

Bug fixes:

  • https://access.redhat.com/security/cve/CVE-2025-5318

Known issues:

  • In the Jaeger UI, clicking on Trace and refreshing the page, or accessing Trace > Trace Timeline > Trace JSON from the Tempo query frontend,

might result in the Tempo query pod failing with an EOF error. To work around this problem, use the distributed tracing UI plugin to view traces.

Solution

For details on how to apply this update, refer to:

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators

Fixes

(none)

CVEs

  • CVE-2025-5318

References

  • https://access.redhat.com/security/updates/classification/
  • https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo

amd64

registry.redhat.io/rhosdt/tempo-operator-bundle@sha256:a3b655318bd147566d238e773a64879c5dc9352f8cd7748fa7bfbc7efe1b3952
registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:89fa077e76e811311d2acf48abb61bcd922d44e089025e61d505ea4c774ac2b6
registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:09397a9449f9d26f928e2f92a81f5fc3ccd7d5c1fe89766e4fadce04906c5d69
registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:94a3b08c6cb8f53e252feebd80cfc17d6ccf7bda0bea3345159df0ac4d2a861c
registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:85d2ca87a046daff70673dad0dbb7409d126c59cd76bbe18a129e40695c2c8d8
registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:d25818f8e291203973fee6941883297d32f24290701b5a0d218cfec56e824eea
registry.redhat.io/rhosdt/tempo-rhel8@sha256:2c938cee177e95f78683ca721744a3dd3b12b1315a1f54893b450457bdd65a5f

arm64

registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:8ee1496c50ffa203204170d053e327fe9fcddf215c799cb96d2c0e74da1dc945
registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:dcbae88d4be5b004ff7473bcfbbd57946c773f7e77fc99da0b5b023310f55ddd
registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:b5ee1febe929df3dd67df124aeb65d1920af553e667c2929a6865784ce546dc3
registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:83583f8010629b65533926a11163565efd4d8b32433fe279218b60cdb13da13f
registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:8ad291327a8410feb2d34afeb0d0c7f847a1cffc838883b65d71427b3f97670a
registry.redhat.io/rhosdt/tempo-rhel8@sha256:6870a410833d5949e5ad0ff6a84a71033e7763a51bcf0a45c02742624edeaa62

ppc64le

registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:4aa93ec7982b8407243a36a97d56aedc8b41ceeea5b9d9129b84a9df922ad5ec
registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:e5911ebdd4c6d93a4537497e51c56b337d1e3eca1d5d8a2298888f6fd026774b
registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:3f12344a5c4c07de6355c07a70115b852a80559daf0c95aec586af96821b6b22
registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:79b8676a25be5b6f2d589c7a86b9b6142d13646d11911b733a8f499dde5448cc
registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:cff164d0bb868d1737eb13081ed3cb823eee82702be265e61390c2fd0f586b75
registry.redhat.io/rhosdt/tempo-rhel8@sha256:0fbed65da8c168be024b4ec28e9c5a860ce81c5bee69ebea24002407dc002be8

s390x

registry.redhat.io/rhosdt/tempo-gateway-rhel8@sha256:f242d27114fa7546df4d7261cccbd8586e9e6ba2487f02e260d8880807b94f43
registry.redhat.io/rhosdt/tempo-jaeger-query-rhel8@sha256:f0290670fda619de4bfa43aa13a720d227761308637320743a27e142dceedfce
registry.redhat.io/rhosdt/tempo-gateway-opa-rhel8@sha256:e81c587e8b6b3456388868759109e1e8cf5ed273c466874531c9cc7593bd2ef5
registry.redhat.io/rhosdt/tempo-rhel8-operator@sha256:054f4ed9b24b1bc6fc885408d261d74fd2fc9f97ed8fc62f4a167e08d2a18eb3
registry.redhat.io/rhosdt/tempo-query-rhel8@sha256:4ac00ba41969f0166c5513a50aac500cb65a4f9fc433073f89e5b03734552adb
registry.redhat.io/rhosdt/tempo-rhel8@sha256:acb7b35830ab844e5066f39f29d96c65f3cb326eb6e5c2a950ca75fb19cc04ae

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2025 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility