Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-42154 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, commercial-grafana, elastic-agent-fips, karma-fips, ops-agent, amazon-cloudwatch-agent-operator, google-cloud-otel-ops-collector, grafana, node-problem-detector, minio, node-problem-detector-fips, agentbeat, aws-otel-collector-fips,...

UBUNTU-CVE-2026-42154

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...