Red Hat Security Advisory

RHSA-2026:43581

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-07-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images opentelemetry-collector-contrib-0.157.0-0.1.hum1@aarch64, opentelemetry-collector-contrib-0.157.0-0.1.hum1@src, opentelemetry-collector-contrib-0.157.0-0.1.hum1@x86_64

TI-2026-35942 CVE-2026-48586 · GHSA-6h9h-5c4r-fqgf

MEDIUM 46

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-409

TI-2026-40992 CVE-2026-56852 · GHSA-jpjm-c3r5-q96r

LOW 39

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00475 Published 2026-07-21 Partial fix · 0.39.0 CWE-835