Security2.9.2
v2.9.2
Security and bug fix release addressing CVE-2026-25679 via Go version update, applying security patches to multiple dependencies, fixing unbounded memory issues in exemplars, and setting a default search result limit of 256KB.
- [BUGFIX] updated go version to 1.26.2 for CVE-2026-25679 fix #6779 (@ie-pham)
- [CHANGE] Set default
max_result_limitfor search to 256*1024 #6525 (@zhxiaogg) - [BUGFIX] avoided unbounded mem by capping exemplars hint #6792 (@zhxiaogg)
- [CHANGE] Upgrade OTLP SDK #6904 (@ie-pham)
- [BUGFIX] Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] #6891 (@renovate-sh-app)
- [BUGFIX] Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [security] #6893 (@renovate-sh-app)
- [BUGFIX] Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [security] #6892 (@renovate-sh-app)
- [BUGFIX] Update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] #6852 (@renovate-sh-app)
- [BUGFIX] Update module github.com/antchfx/xpath to v1.3.6 [security] #6764 (@renovate-sh-app)
- [BUGFIX] Update module google.golang.org/grpc to v1.79.3 [security] #6735 (@renovate-sh-app)
- [BUGFIX] Update module github.com/buger/jsonparser to v1.1.2 [security] #6744 (@renovate-sh-app)
securitybugfixdependenciesperformancememory
Source: original entry ↗
More from Grafana Tempo
Follow Grafana Tempo to get its new changes in your feed and email digest.
Announcement3.1.0
Tempo v3.1.0 Release
Grafana Tempo v3.1.0 is now available with new features, improvements, and bug fixes for distributed tracing collection and analysis.
tempotracingrelease
Announcement3.1.0-rc.1
Grafana Tempo v3.1.0-rc.1
Release candidate for version 3.1.0 of Grafana Tempo, a distributed tracing backend.
releasetempotracingbackend
Announcement3.1.0-rc.0
Grafana Tempo v3.1.0-rc.0
Release candidate for Grafana Tempo v3.1.0 with updates and improvements to the distributed tracing platform.
releasetempotracingrc