761 matches found
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
GO-2026-4394 OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking in go.opentelemetry.io/otel/sdk
OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking in go.opentelemetry.io/otel/sdk...
MiracleLinux 9 : opentelemetry-collector-0.135.0-3.el9_7 (AXSA:2026-158:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-158:01 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding...
AlmaLinux 9 : opentelemetry-collector (ALSA-2026:1908)
The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1908 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding description...
AlmaLinux 10 : opentelemetry-collector (ALSA-2026:1907)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:1907 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descriptio...
RHSA-2026:1908 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
RHSA-2026:1907 Red Hat Security Advisory: opentelemetry-collector security update
Bulletin has no description...
opentelemetry-collector security update
An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...
RockyLinux 9 : opentelemetry-collector (RLSA-2026:1908)
The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:1908 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descriptio...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-csi-driver-fips, percona-server-mongodb-operator-fips, mariadb-operator, cert-manager-istio-csr, cert-manager-openshift-routes, percona-xtradb-cluster-operator-fips, gitlab-operator-fips, aws-privateca-issuer-fips,...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-webhook-pdns, cert-manager-csi-driver, step-issuer, opentelemetry-operator, mariadb-operator, cert-manager-istio-csr, aws-privateca-issuer, cert-manager-cmctl...
Important: Red Hat Security Advisory: opentelemetry-collector security update
An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 For more details about the security issues, including the impact, a CVSS score,...
ALSA-2026:1908 Important: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 For more details about the security issues, including the impact, a CVSS score,...
RHEL 9 : opentelemetry-collector (RHSA-2026:1908)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1908 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: crypto/x509: golang: Denial of Service due to excessive...
ALSA-2026:1907 Important: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 For more details about the security issues, including the impact, a CVSS score,...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-webhook-pdns, cert-manager-csi-driver, step-issuer, opentelemetry-operator, mariadb-operator, cert-manager-istio-csr, aws-privateca-issuer, cert-manager-cmctl...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, cert-manager-csi-driver-fips, percona-server-mongodb-operator-fips, mariadb-operator, cert-manager-istio-csr, cert-manager-openshift-routes, percona-xtradb-cluster-operator-fips, gitlab-operator-fips, aws-privateca-issuer-fips,...
AZL-76449 CVE-2026-24051 affecting package cri-o 1.30.1-1
OpenTelemetry-Go is the Go implementation of OpenTelemetry. The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking Untrusted Search Paths on macOS/Darwin systems. The resource detection code in sdk/resource/hostid.go executes the ioreg system command using a search pat...