Red Hat Security Advisory

RHSA-2025:15406

opentelemetry-collector security update

Released 2025-09-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.4) opentelemetry-collector-0.127.0-2.el9_4

TI-2025-04171 CVE-2025-4673 · GHSA-62jj-gr2r-5c34

LOW 31

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00669 Published 2025-06-11 Partial fix · 1.23.10, 1.24.4