RHSA-2025:10823HighCVSS 7.8
Red Hat Security Advisory: Red Hat build of Tempo 3.6.1 release
🔗 CVE IDs covered (2)
📋 Description
CVE-2025-4673 — net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-6020 — linux-pam: Linux-pam directory Traversal
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2025:10823
- externalhttps://access.redhat.com/security/cve/CVE-2025-4673
- externalhttps://access.redhat.com/security/cve/CVE-2025-6020
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10823.json