Get real-time updates on Telegram

Red Hat Security Advisory: opentelemetry-collector security update

CVE-2024-45336, CVE-2024-9355, CVE-2025-22866, CVE-2025-22868, CVE-2025-27144, CVE-2025-29786, CVE-2025-31133, CVE-2025-47913, CVE-2025-52565, CVE-2025-52881, CVE-2025-58183, CVE-2025-65637, CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-33810, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 affects git-lfs. EPSS 0.00671 (percentile 0.5029), scored 2026-10-03. Fixed version: 0:2.13.3-3.el8_6.8.

CVE

CVE-2024-45336, CVE-2024-9355, CVE-2025-22866, CVE-2025-22868, CVE-2025-27144, CVE-2025-29786, CVE-2025-31133, CVE-2025-47913, CVE-2025-52565, CVE-2025-52881, CVE-2025-58183, CVE-2025-65637, CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-33810, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862

Product

git-lfs

CCR priority

0.2 /100 (P5)

CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · OSV.dev

EPSS

0.00671 · percentile 0.5029 · 2026-10-03

KEV

no

Affected products

• git-lfs · Fixed version: 0:2.13.3-3.el8_6.8
• git-lfs-debuginfo · Fixed version: 0:2.13.3-3.el8_6.8
• git-lfs-debugsource · Fixed version: 0:2.13.3-3.el8_6.8
• git-lfs · Fixed version: 0:2.13.3-3.el8_6.8
• git-lfs-debuginfo · Fixed version: 0:2.13.3-3.el8_6.8
• git-lfs-debugsource · Fixed version: 0:2.13.3-3.el8_6.8
• git-lfs · Fixed version: 0:3.2.0-2.el8_8.8
• git-lfs-debuginfo · Fixed version: 0:3.2.0-2.el8_8.8
• git-lfs-debugsource · Fixed version: 0:3.2.0-2.el8_8.8
• git-lfs · Fixed version: 0:3.2.0-2.el8_8.8
• git-lfs-debuginfo · Fixed version: 0:3.2.0-2.el8_8.8
• git-lfs-debugsource · Fixed version: 0:3.2.0-2.el8_8.8
• osbuild-composer · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-core · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-core-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-debugsource · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-dnf-json · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-tests-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-worker · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-worker-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-core · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-core-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-debugsource · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-dnf-json · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-tests-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-worker · Fixed version: 0:46.3-8.el8_6
• osbuild-composer-worker-debuginfo · Fixed version: 0:46.3-8.el8_6
• osbuild-composer · Fixed version: 0:75-10.el8_8
• osbuild-composer-core · Fixed version: 0:75-10.el8_8
• osbuild-composer-core-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer-debugsource · Fixed version: 0:75-10.el8_8
• osbuild-composer-dnf-json · Fixed version: 0:75-10.el8_8
• osbuild-composer-tests-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer-worker · Fixed version: 0:75-10.el8_8
• osbuild-composer-worker-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer · Fixed version: 0:75-10.el8_8
• osbuild-composer-core · Fixed version: 0:75-10.el8_8
• osbuild-composer-core-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer-debugsource · Fixed version: 0:75-10.el8_8
• osbuild-composer-dnf-json · Fixed version: 0:75-10.el8_8
• osbuild-composer-tests-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer-worker · Fixed version: 0:75-10.el8_8
• osbuild-composer-worker-debuginfo · Fixed version: 0:75-10.el8_8
• osbuild-composer · Fixed version: 0:101.5-2.el8_10
• osbuild-composer-core · Fixed version: 0:101.5-2.el8_10
• osbuild-composer-core-debuginfo · Fixed version: 0:101.5-2.el8_10
• osbuild-composer-debuginfo · Fixed version: 0:101.5-2.el8_10
• osbuild-composer-debugsource · Fixed version: 0:101.5-2.el8_10
• osbuild-composer-tests-debuginfo · Fixed version: 0:101.5-2.el8_10
• osbuild-composer-worker · Fixed version: 0:101.5-2.el8_10
• osbuild-composer-worker-debuginfo · Fixed version: 0:101.5-2.el8_10
• aardvark-dns · Fixed version: 2:1.5.0-2.module+el8.8.0+23884+2031fc78
• buildah · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-debuginfo · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-debugsource · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-tests · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-tests-debuginfo · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• cockpit-podman · Fixed version: 0:63.1-1.module+el8.8.0+23884+2031fc78
• conmon · Fixed version: 3:2.1.6-1.module+el8.8.0+23884+2031fc78
• conmon-debuginfo · Fixed version: 3:2.1.6-1.module+el8.8.0+23884+2031fc78
• conmon-debugsource · Fixed version: 3:2.1.6-1.module+el8.8.0+23884+2031fc78
• container-selinux · Fixed version: 2:2.229.0-1.module+el8.8.0+23884+2031fc78
• containernetworking-plugins · Fixed version: 1:1.2.0-3.module+el8.8.0+23884+2031fc78
• containernetworking-plugins-debuginfo · Fixed version: 1:1.2.0-3.module+el8.8.0+23884+2031fc78
• containernetworking-plugins-debugsource · Fixed version: 1:1.2.0-3.module+el8.8.0+23884+2031fc78
• containers-common · Fixed version: 2:1-67.module+el8.8.0+23884+2031fc78
• crit · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-debuginfo · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-debugsource · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-devel · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-libs · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-libs-debuginfo · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• crun · Fixed version: 0:1.14.3-1.module+el8.8.0+23884+2031fc78
• crun-debuginfo · Fixed version: 0:1.14.3-1.module+el8.8.0+23884+2031fc78
• crun-debugsource · Fixed version: 0:1.14.3-1.module+el8.8.0+23884+2031fc78
• fuse-overlayfs · Fixed version: 0:1.11-1.module+el8.8.0+23884+2031fc78
• fuse-overlayfs-debuginfo · Fixed version: 0:1.11-1.module+el8.8.0+23884+2031fc78
• fuse-overlayfs-debugsource · Fixed version: 0:1.11-1.module+el8.8.0+23884+2031fc78
• libslirp · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• libslirp-debuginfo · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• libslirp-debugsource · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• libslirp-devel · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• netavark · Fixed version: 2:1.5.1-3.module+el8.8.0+23884+2031fc78
• oci-seccomp-bpf-hook · Fixed version: 0:1.2.8-1.module+el8.8.0+23884+2031fc78
• oci-seccomp-bpf-hook-debuginfo · Fixed version: 0:1.2.8-1.module+el8.8.0+23884+2031fc78
• oci-seccomp-bpf-hook-debugsource · Fixed version: 0:1.2.8-1.module+el8.8.0+23884+2031fc78
• podman · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-catatonit · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-catatonit-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-debugsource · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-docker · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-gvproxy · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-gvproxy-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-plugins · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-plugins-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-remote · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-remote-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-tests · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• python-podman · Fixed version: 0:4.4.1-1.module+el8.8.0+23884+2031fc78
• python3-criu · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• python3-podman · Fixed version: 0:4.4.1-1.module+el8.8.0+23884+2031fc78
• runc · Fixed version: 1:1.2.9-1.module+el8.8.0+23884+2031fc78
• runc-debuginfo · Fixed version: 1:1.2.9-1.module+el8.8.0+23884+2031fc78
• runc-debugsource · Fixed version: 1:1.2.9-1.module+el8.8.0+23884+2031fc78
• skopeo · Fixed version: 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78
• skopeo-tests · Fixed version: 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78
• slirp4netns · Fixed version: 0:1.2.0-3.module+el8.8.0+23884+2031fc78
• slirp4netns-debuginfo · Fixed version: 0:1.2.0-3.module+el8.8.0+23884+2031fc78
• slirp4netns-debugsource · Fixed version: 0:1.2.0-3.module+el8.8.0+23884+2031fc78
• toolbox · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• toolbox-debuginfo · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• toolbox-debugsource · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• toolbox-tests · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• udica · Fixed version: 0:0.2.6-20.module+el8.8.0+23884+2031fc78
• aardvark-dns · Fixed version: 2:1.5.0-2.module+el8.8.0+23884+2031fc78
• buildah · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-debuginfo · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-debugsource · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-tests · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• buildah-tests-debuginfo · Fixed version: 1:1.29.7-1.module+el8.8.0+24026+ca15dd94
• cockpit-podman · Fixed version: 0:63.1-1.module+el8.8.0+23884+2031fc78
• conmon · Fixed version: 3:2.1.6-1.module+el8.8.0+23884+2031fc78
• conmon-debuginfo · Fixed version: 3:2.1.6-1.module+el8.8.0+23884+2031fc78
• conmon-debugsource · Fixed version: 3:2.1.6-1.module+el8.8.0+23884+2031fc78
• container-selinux · Fixed version: 2:2.229.0-1.module+el8.8.0+23884+2031fc78
• containernetworking-plugins · Fixed version: 1:1.2.0-3.module+el8.8.0+23884+2031fc78
• containernetworking-plugins-debuginfo · Fixed version: 1:1.2.0-3.module+el8.8.0+23884+2031fc78
• containernetworking-plugins-debugsource · Fixed version: 1:1.2.0-3.module+el8.8.0+23884+2031fc78
• containers-common · Fixed version: 2:1-67.module+el8.8.0+23884+2031fc78
• crit · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-debuginfo · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-debugsource · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-devel · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-libs · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• criu-libs-debuginfo · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• crun · Fixed version: 0:1.14.3-1.module+el8.8.0+23884+2031fc78
• crun-debuginfo · Fixed version: 0:1.14.3-1.module+el8.8.0+23884+2031fc78
• crun-debugsource · Fixed version: 0:1.14.3-1.module+el8.8.0+23884+2031fc78
• fuse-overlayfs · Fixed version: 0:1.11-1.module+el8.8.0+23884+2031fc78
• fuse-overlayfs-debuginfo · Fixed version: 0:1.11-1.module+el8.8.0+23884+2031fc78
• fuse-overlayfs-debugsource · Fixed version: 0:1.11-1.module+el8.8.0+23884+2031fc78
• libslirp · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• libslirp-debuginfo · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• libslirp-debugsource · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• libslirp-devel · Fixed version: 0:4.4.0-1.module+el8.8.0+23884+2031fc78
• netavark · Fixed version: 2:1.5.1-3.module+el8.8.0+23884+2031fc78
• oci-seccomp-bpf-hook · Fixed version: 0:1.2.8-1.module+el8.8.0+23884+2031fc78
• oci-seccomp-bpf-hook-debuginfo · Fixed version: 0:1.2.8-1.module+el8.8.0+23884+2031fc78
• oci-seccomp-bpf-hook-debugsource · Fixed version: 0:1.2.8-1.module+el8.8.0+23884+2031fc78
• podman · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-catatonit · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-catatonit-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-debugsource · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-docker · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-gvproxy · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-gvproxy-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-plugins · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-plugins-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-remote · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-remote-debuginfo · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• podman-tests · Fixed version: 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5
• python-podman · Fixed version: 0:4.4.1-1.module+el8.8.0+23884+2031fc78
• python3-criu · Fixed version: 0:3.15-4.module+el8.8.0+23884+2031fc78
• python3-podman · Fixed version: 0:4.4.1-1.module+el8.8.0+23884+2031fc78
• runc · Fixed version: 1:1.2.9-1.module+el8.8.0+23884+2031fc78
• runc-debuginfo · Fixed version: 1:1.2.9-1.module+el8.8.0+23884+2031fc78
• runc-debugsource · Fixed version: 1:1.2.9-1.module+el8.8.0+23884+2031fc78
• skopeo · Fixed version: 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78
• skopeo-tests · Fixed version: 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78
• slirp4netns · Fixed version: 0:1.2.0-3.module+el8.8.0+23884+2031fc78
• slirp4netns-debuginfo · Fixed version: 0:1.2.0-3.module+el8.8.0+23884+2031fc78
• slirp4netns-debugsource · Fixed version: 0:1.2.0-3.module+el8.8.0+23884+2031fc78
• toolbox · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• toolbox-debuginfo · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• toolbox-debugsource · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• toolbox-tests · Fixed version: 0:0.0.99.3-7.module+el8.8.0+23884+2031fc78
• udica · Fixed version: 0:0.2.6-20.module+el8.8.0+23884+2031fc78
• opentelemetry-collector · Fixed version: 0:0.107.0-7.el9_4
• opentelemetry-collector · Fixed version: 0:0.107.0-8.el9_5

Provenance

• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-45336.html