RockyLinux 9 : opentelemetry-collector (RLSA-2026:34359)

The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:34359 advisory. github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154...

RHSA-2026:34359 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:34357 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 10 : opentelemetry-collector (RHSA-2026:34357)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:34357 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone, gatekeeper, frankenphp-8.2, nerdctl, frankenphp-8.5, prometheus, opentelemetry-collector, gatekeeper-fips, rancher, containerd, knative-kafka-broker-fips, cert-manager, nemo, skaffold-fips, prometheus-elasticsearch-exporter, knative-serving-fips, spire-server,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: vault-benchmark, osv-scanner, pulumi-language-java, teleport, go-discover, gitea, tkn, kubernetes, atlantis, k8sgpt, crossplane-provider-azure-managedidentity, tflint, k3s, step-issuer, melange, rancher-agent, buildkitd, cosign, rootlesskit, external-secrets-operator...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitlab-kas, kaf, osv-scanner, rancher, containerd, loki, skaffold, cilium, cilium-cli, kots, gitea, minio, zot, kubernetes, spire-server, trivy-operator, nerdctl, k9s, istio, aactl, k3s, opentelemetry-collector, chisel, snyk-cli, kyverno, helm, mattermost,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, kaf, rancher, containerd, loki, cilium, cilium-cli, kots, minio, zot, kubernetes, spire-server, docker-cli-buildx, nerdctl, istio, aactl, k3s, opentelemetry-collector, snyk-cli, kyverno, helm, mattermost, kine, rancher-agent, cloud-provider-aws,...

GO-2026-5690 opentelemetry-collector-contrib: githubreceiver silently ignores configured required_headers authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver

opentelemetry-collector-contrib: githubreceiver silently ignores configured requiredheaders authentication in github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver...

GO-2026-5544 Authenticate method auth bypass in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension

Authenticate method auth bypass in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.153.0-1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector: opentelemetry-collector-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-0.153.0-1.hum1.src src...

CLEANSTART-2026-MC76610 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: gptscript, vale, hubble, crossplane-provider-azure-authorization, step, kots, gitea, minio, zot, kubernetes, nerdctl, ingress-nginx-controller, istio, crossplane-provider-azure-storage, karpenter, caddy, grafana-pyroscope, k3s, opentelemetry-collector, snyk-cli,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: gptscript, vale, hubble, crossplane-provider-azure-authorization, step, kots, gitea, minio, zot, kubernetes, nerdctl, ingress-nginx-controller, istio, crossplane-provider-azure-storage, karpenter, caddy, grafana-pyroscope, k3s, opentelemetry-collector, snyk-cli,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: gptscript, vale, hubble, crossplane-provider-azure-authorization, step, kots, gitea, minio, zot, kubernetes, nerdctl, ingress-nginx-controller, istio, crossplane-provider-azure-storage, karpenter, caddy, grafana-pyroscope, k3s, opentelemetry-collector, snyk-cli,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: gptscript, vale, hubble, crossplane-provider-azure-authorization, step, kots, gitea, minio, zot, kubernetes, nerdctl, ingress-nginx-controller, istio, crossplane-provider-azure-storage, karpenter, caddy, grafana-pyroscope, k3s, opentelemetry-collector, snyk-cli,...