Skip to content
OpenAdvisories
High RHSA-2025:23664 1 CVE

Red Hat Security Advisory: opentelemetry-collector security update

Published Dec 19, 2025 · Updated Sep 17, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.1 opentelemetry-collector 0:0.135.0-2.el10_1

Vulnerabilities 1

  • High 7.5
    CVE-2025-68156

    Expr has Denial of Service via Unbounded Recursion in Builtin Functions

    Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforc…

    expr-lang expr k3s kubeflow-pipelines-apiserver Azure Linux Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2422891
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23664.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-68156
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68156
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68156
  • article
    https://github.com/expr-lang/expr/pull/870
  • article
    https://github.com/expr-lang/expr/security/advisories/GHSA-cfpf-hrx2-8rv6