RHSA-2026:34359 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:34357 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: kyverno-fips, flux, flux-image-automation-controller, kaf, tekton-pipelines, cloud-provider-aws, harbor, knative-serving-fips, skaffold, skaffold-fips, zot, commercial-grafana, gatekeeper-fips, chisel, coder-fips, knative-kafka-broker-fips, kubescape-server-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: kubernetes, skaffold, argocd-image-updater, zarf, cilium-cli, helm, prometheus, aactl, argo-cd, cloud-provider-aws, containerd, kots, snyk-cli, mattermost, flux-source-controller, fscrypt, k3s, kine, spire-server, rancher-agent, flux, k9s, gitlab-kas, istio, kaf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: nuclei, scorecard, chezmoi, kubernetes, skaffold, terraform-provider-tls, prometheus, tekton-chains, ko, snyk-cli, mattermost, mods, terraform-provider-azurerm, istio, caddy, grype, kaf, syft, rancher, crossplane-provider-family-azure, trivy-operator, vitess, openbao...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: kubernetes, cilium-cli, helm, prometheus, aactl, podman, argo-cd, docker-cli-buildx, cloud-provider-aws, containerd, kots, snyk-cli, buildah, mattermost, fscrypt, k3s, kine, spire-server, rancher-agent, flux, gitlab-kas, istio, kaf, knative-serving, zot, rancher,...

GO-2026-5544 opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension

opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay in github.com/open-telemetry/opentelemetry-collector-contrib/extension/azureauthextension...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.155.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.155.0-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.153.0-1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector: opentelemetry-collector-0.153.0-1.hum1 aarch64, x8664 opentelemetry-collector-0.153.0-1.hum1.src src...

CLEANSTART-2026-MC76610 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: kubernetes, glab, fq, helm, prometheus, crossplane-provider-aws-elasticache, hubble, argo-cd, traefik, cilium, step-issuer, snyk-cli, kots, crossplane-provider-azure-storage, k3s, kine, flux, istio, caddy, zot, telegraf, vitess, terraform-provider-acme, nerdctl,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: kubernetes, glab, fq, helm, prometheus, crossplane-provider-aws-elasticache, hubble, argo-cd, traefik, cilium, step-issuer, snyk-cli, kots, crossplane-provider-azure-storage, k3s, kine, flux, istio, caddy, zot, telegraf, vitess, terraform-provider-acme, nerdctl,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: kubernetes, glab, fq, helm, prometheus, crossplane-provider-aws-elasticache, hubble, argo-cd, traefik, cilium, step-issuer, snyk-cli, kots, crossplane-provider-azure-storage, k3s, kine, flux, istio, caddy, zot, telegraf, vitess, terraform-provider-acme, nerdctl,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: kubernetes, glab, fq, helm, prometheus, crossplane-provider-aws-elasticache, hubble, argo-cd, traefik, cilium, step-issuer, snyk-cli, kots, crossplane-provider-azure-storage, k3s, kine, flux, istio, caddy, zot, telegraf, vitess, terraform-provider-acme, nerdctl,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: kubernetes, glab, fq, helm, prometheus, crossplane-provider-aws-elasticache, hubble, argo-cd, traefik, cilium, step-issuer, snyk-cli, kots, crossplane-provider-azure-storage, k3s, kine, flux, istio, caddy, zot, telegraf, vitess, terraform-provider-acme, nerdctl,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: kubernetes, glab, fq, helm, prometheus, crossplane-provider-aws-elasticache, hubble, argo-cd, traefik, cilium, step-issuer, snyk-cli, kots, crossplane-provider-azure-storage, k3s, kine, flux, istio, caddy, zot, telegraf, vitess, terraform-provider-acme, nerdctl,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: kubernetes, glab, fq, helm, prometheus, crossplane-provider-aws-elasticache, hubble, argo-cd, traefik, cilium, step-issuer, snyk-cli, kots, crossplane-provider-azure-storage, k3s, kine, flux, istio, caddy, zot, telegraf, vitess, terraform-provider-acme, nerdctl,...