diff --git a/modules/distr-tracing-tempo-about-rn.adoc b/modules/distr-tracing-tempo-about-rn.adoc index e53e126304..b00b35681a 100644 --- a/modules/distr-tracing-tempo-about-rn.adoc +++ b/modules/distr-tracing-tempo-about-rn.adoc @@ -7,7 +7,7 @@ = About this release [role="_abstract"] -{DTShortName} 3.8 is provided through the link:https://catalog.redhat.com/software/containers/rhosdt/tempo-operator-bundle/642c3e0eacf1b5bdbba7654a/history[{TempoOperator} 0.19.0] and based on the open source link:https://grafana.com/oss/tempo/[Grafana Tempo] 2.9.0. +{DTShortName} 3.8.1 is provided through the link:https://catalog.redhat.com/software/containers/rhosdt/tempo-operator-bundle/642c3e0eacf1b5bdbba7654a/history[{TempoOperator} 0.19.0] and based on the open source link:https://grafana.com/oss/tempo/[Grafana Tempo] 2.9.0. //// [NOTE] diff --git a/modules/distr-tracing-tempo-rn-bug-fixes.adoc b/modules/distr-tracing-tempo-rn-bug-fixes.adoc index bf7ea1e657..ce9976522e 100644 --- a/modules/distr-tracing-tempo-rn-bug-fixes.adoc +++ b/modules/distr-tracing-tempo-rn-bug-fixes.adoc @@ -6,6 +6,15 @@ [id="fixed-issues_{context}"] = Fixed issues +The {TempoShortName} 3.8.1 patch release includes a fix for the following issue: + +CVE-2025-58183:: +Before this update, malicious tar archives could be used for denial of service by triggering memory overuse by the `tar.Reader` decompressor. With this release, the Go version upgrade to 1.25.3 enforces a maximum limit on the count of sparse region data blocks. As a result, memory usage when processing these archives is bounded and secure. ++ +link:https://www.cve.org/CVERecord?id=CVE-2025-58183[CVE-2025-58183] + +The {TempoShortName} 3.8 release fixes the following issues: + Resolved issue with TLS certificates affecting Tempo pods:: Before this update, the Tempo pods would stop to communicate because internal TLS certificates were renewed. With this update, the Tempo pods automatically restart when certificates are renewed. + diff --git a/observability/distr_tracing/distr-tracing-rn.adoc b/observability/distr_tracing/distr-tracing-rn.adoc index 784103ed86..246794043a 100644 --- a/observability/distr_tracing/distr-tracing-rn.adoc +++ b/observability/distr_tracing/distr-tracing-rn.adoc @@ -1,7 +1,7 @@ :_mod-docs-content-type: ASSEMBLY include::_attributes/common-attributes.adoc[] [id="distr-tracing-rn"] -= Release notes for the {TempoName} 3.8 += Release notes for the {TempoName} 3.8.1 :context: distr-tracing-rn