Red Hat Security AdvisoryRHSA-2026:14162
Red Hat build of OpenTelemetry 3.9.3 release
Released 2026-05-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift distributed tracing 3.9.3 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9, registry.redhat.io/rhosdt/opentelemetry-rhel9-operator, registry.redhat.io/rhosdt/opentelemetry-target-allocator-rhel9
Fixes 5 records
Priority MEDIUM 41
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01163 · Published 2026-04-28 · Partial fix · 0.23.0 CWE-190
Priority MEDIUM 40
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00632 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-770
Priority MEDIUM 40
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00626 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-770
Priority LOW 32
A flaw was found in libcap.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00209 · Published 2026-04-09 · Partial fix · 2.69-7.el10_1.1, 2.69-7.el10_2.1 +51 CWE-367
Priority LOW 24
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00126 · Published 2026-03-23 · Partial fix · 257.11, 258.5 +1 CWE-269
THREATIST.IORead the docs