Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.4 release

Red Hat OpenShift distributed tracing platform Tempo 3.11.4 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides security improvements. Breaking changes: None Deprecations: None Technology Preview features: None Enhancements: None Bug fixes: None Kno...

CLEANSTART-2026-NJ93405 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy

Security vulnerability affects the grafana package. Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy...

CLEANSTART-2026-TJ33106 vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...

Security vulnerability affects the grafana package. A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...

CLEANSTART-2026-VB66533 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy

Security vulnerability affects the grafana package. Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy...

CLEANSTART-2026-OA79587 vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...

Security vulnerability affects the tempo package. A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...

CLEANSTART-2026-FA67601 Security fix for GHSA-6g7g-w4f8-9c9x applied in: terragrunt-fips 0.97.2-r2, terragrunt-fips 0.98.0-r2, tempo 2.9.1-r0

GHSA-6g7g-w4f8-9c9x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OK47099 Security fix for GHSA-259r-337f-4rfw applied in: temporal-server 1.28.4-r1, temporal-server 1.29.7-r1, tempo 2.9.5-r1, argo-workflows 3.7.15-r1, ollama 0.32.11-r1, ollama-fips 0.32.11-r1, cosign 2.6.4-r2

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HR94174 TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash

Security vulnerability affects the grafana package. A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash...

CLEANSTART-2026-CL22567 vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...

Security vulnerability affects the grafana package. A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...

CLEANSTART-2026-IG62629 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy

Security vulnerability affects the grafana package. Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy...

OPENSUSE-SU-2026:12351-1 tempo-cli-3.1.1-1.1 on GA media

These are all security issues fixed in the tempo-cli-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-134776

These are all security issues fixed in the tempo-cli-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.11.3 release

Red Hat OpenShift distributed tracing platform Tempo 3.11.3 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides new features and security improvements. Breaking changes: None Deprecations: None Technology Preview features: None Enhancements: This...

CLEANSTART-2026-IN99957 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Security vulnerability affects the tempo package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CLEANSTART-2026-CZ18029 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Security vulnerability affects the tempo package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...

CLEANSTART-2026-KD86605 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read

Security vulnerability affects the tempo package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

PT-2026-132925

Security vulnerability affects the tempo package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...

PT-2026-132962

Security vulnerability affects the tempo package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

PT-2026-132956

Security vulnerability affects the tempo package. SSH clients receiving SSH AGENT SUCCESS when expecting a typed response will panic and cause early termination of the client process...

CLEANSTART-2026-IH60054 vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...

Security vulnerability affects the grafana-fips package. A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...