Red Hat Security Advisory

RHSA-2025:10735

Red Hat build of OpenTelemetry 3.6.1 release

Released 2025-07-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.6.0 registry.redhat.io/rhosdt/opentelemetry-collector-rhel8, registry.redhat.io/rhosdt/opentelemetry-rhel8-operator, registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel8

TI-2025-05440 CVE-2025-6020

LOW 36

A flaw was found in linux-pam.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00472 Published 2025-06-17 Fixed in 1.7.1, 1.6.1-8.el10 +49 CWE-22

TI-2025-04171 CVE-2025-4673 · GHSA-62jj-gr2r-5c34

LOW 31

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00669 Published 2025-06-11 Partial fix · 1.23.10, 1.24.4