Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 1

Vulnerabilities 2

• Medium 6.9
  CVE-2026-55701

  OpenTelemetry githubreceiver silently ignores configured required_headers authentication

  The OpenTelemetry Collector Contrib repository contains components for the OpenTelemetry Collector. Prior to 0.151.0, the githubreceiver validates the receiver/githubreceiver/config.go RequiredHeaders configuration at startup, but receiver/githubreceiver/trac…

  open-telemetry opentelemetry-collector-contrib github.com/open-telemetry/opentelemetry-collector-contrib/receiver/githubreceiver golang-opentelemetry-contrib Debian Go
  Sep 15, 2026
• Medium 5.3
  CVE-2026-47256

  OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

  OpenTelemetry, also known as OTel, is a vendor-neutral open source Observability framework for instrumenting, generating, collecting, and exporting telemetry data such as traces, metrics, and logs. Prior to 0.154.0, the Sentry exporter reads the remote OTLP s…

  open-telemetry opentelemetry-collector-contrib github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter golang-opentelemetry-contrib Debian Go
  Sep 14, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-47256
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-55701
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63152.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2533233
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-47256
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-47256
• article
  https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/3113638f216143f523b57f447728464337ae4903
• article
  https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.154.0
• article
  https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-4jvg-4jfx-fmhc
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2533955
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-55701
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-55701
• article
  https://github.com/open-telemetry/opentelemetry-collector-contrib/commit/54143ccd14f5ebd74ca741739d2099c7fbebbd98
• article
  https://github.com/open-telemetry/opentelemetry-collector-contrib/pull/47854
• article
  https://github.com/open-telemetry/opentelemetry-collector-contrib/releases/tag/v0.151.0
• article
  https://github.com/open-telemetry/opentelemetry-collector-contrib/security/advisories/GHSA-w5cv-pw74-4rxc