Linux · Security advisory · October 9, 2026

RHSA-2026:76744: opentelemetry-collector security update

RHSA-2026:76744, released October 9, 2026, fixes 1 CVE in opentelemetry-collector (version 0:0.158.0-1.el9_8). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0064
50th percentile

Fixed package versions

ProductReleaseFixed in
opentelemetry-collectorRHEL 90:0.158.0-1.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-84445 gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers 7.5 0.0064 None reported
Showing 1 to 1 of 1 1