github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending oversized or invalid baggage headers. The Parse function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when...

Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs CVE-2026-39820 mime: golang:...

ALSA-2026:65117 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs CVE-2026-39820 mime: golang:...

Security update for cadvisor (important)

openSUSE security update: security update for cadvisor ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21786-1 Rating: important References: bsc1266645 bsc1276727 Cross-References: CVE-2026-39821 CVE-2026-41178 CVSS scores: CVE-2026-39821 SUSE : 7.4...

ALSA-2026:65116 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs CVE-2026-39820 mime: golang:...

GHSA-6C5V-HQJR-5XXP vulnerabilities

Vulnerabilities for packages: argo-events-fips, guac, trufflehog, versitygw-fips, sftpgo-plugin-pubsub, keda, bento-fips, opentelemetry-collector-contrib-fips, keda-fips, falcosidekick-fips, dapr, opentelemetry-collector-contrib, bento, nuclio-controller-fips, trufflehog-fips, minio-fips,...

CVE-2026-79921 vulnerabilities

Vulnerabilities for packages: argo-events-fips, guac, trufflehog, versitygw-fips, sftpgo-plugin-pubsub, keda, bento-fips, opentelemetry-collector-contrib-fips, keda-fips, falcosidekick-fips, dapr, opentelemetry-collector-contrib, bento, nuclio-controller-fips, trufflehog-fips, minio-fips,...

Security update for apptainer

This update for apptainer fixes the following issue: CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276731. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

CLEANSTART-2026-WP42827 Security fixes in opentelemetry-collector-contrib 0.159.0-r1

Package opentelemetry-collector-contrib version 0.159.0-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-LU79721 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r1

Package opentelemetry-collector-contrib-fips version 0.158.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CLEANSTART-2026-WR36950 Security fixes in opentelemetry-collector-contrib 0.159.0-r2

Package opentelemetry-collector-contrib version 0.159.0-r2 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...

CLEANSTART-2026-FB79569 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r1

Package opentelemetry-collector-contrib-fips version 0.159.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CLEANSTART-2026-DF04587 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r3

Package opentelemetry-collector-contrib-fips version 0.158.0-r3 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CLEANSTART-2026-IA07692 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r2

Package opentelemetry-collector-contrib-fips version 0.158.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CLEANSTART-2026-LD03070 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r2

Package opentelemetry-collector-contrib-fips version 0.159.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

Security update for helm

This update for helm fixes the following issues: CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276510. CVE-2026-63308: processing zero-length byte slices in...

CVE-2026-45404

A flaw was found in OpenTelemetry-Go. The OpenTracing bridge's bridgeSpan component contains an unsynchronized map, extraBaggageItems, which is not safe for concurrent access. When multiple operations, such as SetBaggageItem and correlation.MapFromContext, attempt to access this map simultaneousl...

CVE-2026-44967

A flaw was found in opentelemetry-cpp. The OTLP HTTP exporters traces/metrics/logs read the full HTTP response into an in-memory vector of bytes without a size cap. This can be exploited by an attacker-controlled collector endpoint or a network attacker performing a Man-in-the-Middle MITM attack...

openSUSE 16 Security Update : coredns (openSUSE-SU-2026:21674-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21674-1 advisory. Changes in coredns: - Update to version 1.14.7: plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.159.0-0.1.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.159.0-0.1.1.hum1.src src Security Fixes:...