RHSA-2026:34357 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ALSA-2026:34359 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154 github.com/prometheus/prometheus: Prometheus: Information...

RHEL 10 : opentelemetry-collector (RHSA-2026:34357)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:34357 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

MAL-2026-6701 Malicious code in ripshakti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7ce8c4b0c7a25d70f9043d4208694cdef5ad174aa493ee9e9097ea6693a668 The package's preinstall lifecycle hook scripts.preinstall = "node index.js" auto-executes index.js on npm install. The script queries the AWS instan...

Malicious code in @uisp/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e841054b9f1d1625077178da23e8096c345ff196851058742d4903747d1461ea Package published to the public npm registry under the @uisp scope at version 99.0.1 — the canonical dependency-confusion shape organization-matching...

Malicious code in anthropic-internal-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3bb04aee6f5f1d8768b7fd2173cd7c0cac18b5d83d6a83cf2be96a7512d8f7 Package name impersonates the Anthropic namespace and ships a preinstall hook scripts.preinstall = 'node index.js' that executes on every npm install...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-servicebus, cert-manager, crossplane-provider-azure-managedidentity, crossplane-provider-azure-servicelinker, splunk-otel-collector, external-secrets-operator-fips, crossplane-provider-azure-network, crossplane-provider-azure-orbital,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nerdctl, cloudbeat, zarf-fips, gitlab-rails-ce-fips, kubescape, gitlab-rails-ce, kyverno, mattermost-fips, fscrypt, prometheus-mongodb-exporter, prometheus, kubevela-fips, backup-restore-operator, argo-workflows-fips, commercial-grafana, spire-server, gitea-fips,...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: nfpm, crossplane-provider-azure-storage, nuclei, x509-certificate-exporter, crossplane-provider-family-azure, splunk-otel-collector, crossplane-provider-azure-managedidentity, cert-manager, grafana, telegraf, crossplane-provider-azure-authorization,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, osv-scanner, prometheus-operator, helm, flux-source-controller, flux, fscrypt, cert-manager, kubescape, nerdctl, skaffold, prometheus, snyk-cli, minio, k9s, mattermost, rancher-agent, istio, kubernetes-dashboard, k3s, kyverno, zarf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: nuclei, steampipe, guac, teleport, flux, grype, datadog-agent, nerdctl, skaffold, prometheus, dagger, kargo, minio, crossplane-provider-family-azure, kyverno, apko, pulumi-language-dotnet, kine, cilium-cli, ko, gomplate, zot, crossplane-provider-azure-managedidentity...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: prometheus-operator, helm, flux, docker-cli-buildx, fscrypt, cert-manager, buildah, nerdctl, prometheus, snyk-cli, minio, mattermost, rancher-agent, istio, kubernetes-dashboard, k3s, kyverno, spire-server, telegraf, external-dns, external-secrets-operator, kine,...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

GO-2026-5544 Authenticate method auth bypass in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension

Authenticate method auth bypass in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...

python3.14 security, bug fix, and enhancement update

3.14.5-1 - Update to 3.14.5 Resolves: RHEL-180642 3.14.5rc1-1 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 3.14.4-3 - Depend on sqlite-libs with deserialize API Resolves: RHEL-180476...

EUVD-2026-38873

In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. SOCKMAP can hide inflight fd from AFUNIX GC. When a socket in SOCKMAP receives skb with inflight fd, skpsockverdictdataready looks up the mapped socket and enqueue skb to its...

CVE-2026-53005

In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. SOCKMAP can hide inflight fd from AFUNIX GC. When a socket in SOCKMAP receives skb with inflight fd, skpsockverdictdataready looks up the mapped socket and enqueue skb to its...