Skip to content
OpenAdvisories
High RHSA-2026:0513 1 CVE

Red Hat Security Advisory: opentelemetry-collector security update

Published Jan 14, 2026 · Updated Sep 17, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream opentelemetry-collector 0:0.135.0-2.el9_6

Vulnerabilities 1

  • High 7.5
    CVE-2025-68156

    Expr has Denial of Service via Unbounded Recursion in Builtin Functions

    Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforc…

    expr-lang expr k3s kubeflow-pipelines-apiserver Azure Linux Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2422891
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0513.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-68156
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68156
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68156
  • article
    https://github.com/expr-lang/expr/pull/870
  • article
    https://github.com/expr-lang/expr/security/advisories/GHSA-cfpf-hrx2-8rv6