OBSDOCS-2941: Release notes for Distributed Tracing 3.8.1

Author: max-cx

modules/distr-tracing-tempo-about-rn.adoc

@@ -7,7 +7,7 @@
 = About this release
 
 [role="_abstract"]
-{DTShortName} 3.8 is provided through the link:https://catalog.redhat.com/software/containers/rhosdt/tempo-operator-bundle/642c3e0eacf1b5bdbba7654a/history[{TempoOperator} 0.19.0] and based on the open source link:https://grafana.com/oss/tempo/[Grafana Tempo] 2.9.0.
+{DTShortName} 3.8.1 is provided through the link:https://catalog.redhat.com/software/containers/rhosdt/tempo-operator-bundle/642c3e0eacf1b5bdbba7654a/history[{TempoOperator} 0.19.0] and based on the open source link:https://grafana.com/oss/tempo/[Grafana Tempo] 2.9.0.
 
 ////
 [NOTE]

modules/distr-tracing-tempo-rn-bug-fixes.adoc

@@ -6,6 +6,15 @@
 [id="fixed-issues_{context}"]
 = Fixed issues
 
+The {TempoShortName} 3.8.1 patch release includes a fix for the following issue:
+
+CVE-2025-58183::
+Before this update, malicious tar archives could be used for denial of service by triggering memory overuse by the `tar.Reader` decompressor. With this release, the Go version upgrade to 1.25.3 enforces a maximum limit on the count of sparse region data blocks. As a result, memory usage when processing these archives is bounded and secure.
++
+link:https://www.cve.org/CVERecord?id=CVE-2025-58183[CVE-2025-58183]
+
+The {TempoShortName} 3.8 release fixes the following issues:
+
 Resolved issue with TLS certificates affecting Tempo pods::
 Before this update, the Tempo pods would stop to communicate because internal TLS certificates were renewed. With this update, the Tempo pods automatically restart when certificates are renewed.
 +

observability/distr_tracing/distr-tracing-rn.adoc

@@ -1,7 +1,7 @@
 :_mod-docs-content-type: ASSEMBLY
 include::_attributes/common-attributes.adoc[]
 [id="distr-tracing-rn"]
-= Release notes for the {TempoName} 3.8
+= Release notes for the {TempoName} 3.8.1
 :context: distr-tracing-rn