Release notes from tempo v3.0.3

{
  "id": "8e6e10d8ec7e7e69f13d415c2448c69c9f83f9865afe9289c4545146cc2a7831",
  "url": "https://github.com/grafana/tempo/releases/tag/v3.0.3",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Release notes from tempo v3.0.3",
    "summary": "Tempo v3.0.3 updates Go and several Go dependencies as security operations.",
    "evidence": "Security operations: Update Go to 1.26.5",
    "products": [
      {
        "name": {
          "value": "tempo",
          "evidence": "Release notes from tempo"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v3.0.3",
            "evidence": "Release notes from tempo\nv3.0.3"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-39822",
        "evidence": "Go to 1.26.5 (CVE-2026-39822"
      },
      {
        "value": "CVE-2026-27145",
        "evidence": "CVE-2026-39822, CVE-2026-27145"
      },
      {
        "value": "CVE-2026-42504",
        "evidence": "CVE-2026-27145, CVE-2026-42504"
      },
      {
        "value": "CVE-2026-42505",
        "evidence": "CVE-2026-42504, CVE-2026-42505"
      },
      {
        "value": "CVE-2026-42507",
        "evidence": "CVE-2026-42505, CVE-2026-42507)"
      },
      {
        "value": "CVE-2026-46600",
        "evidence": "golang.org/x/net to v0.56.0 (CVE-2026-46600)"
      },
      {
        "value": "CVE-2026-56852",
        "evidence": "golang.org/x/text to v0.39.0 (CVE-2026-56852)"
      },
      {
        "value": "CVE-2026-41178",
        "evidence": "go.opentelemetry.io/otel to v1.44.0 (CVE-2026-41178)"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-grafana-tempo",
  "document_id": 21327,
  "published_at": "2026-08-13T20:37:13+00:00"
}