Red Hat Security Advisory

RHSA-2026:65542

Red Hat build of OpenTelemetry 3.11.0 release

Released 2026-09-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift distributed tracing 3.11 registry.redhat.io/rhosdt/opentelemetry-collector-rhel9

TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29

MEDIUM 46

Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-190

TI-2026-35942 CVE-2026-48586 · GHSA-6h9h-5c4r-fqgf

MEDIUM 46

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0103 Published 2026-07-27 Partial fix · 0.24.0 CWE-409