Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
56ee3053 by Salvatore Bonaccorso at 2026-09-28T05:59:05+02:00
Track fixes via experimental for golang-opentelemetry-otel issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13182,6 +13182,7 @@ CVE-2026-85128 (The Choose User Role at Registration
WordPress plugin before 1.3
CVE-2026-82561 (Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that
replace ...)
NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-81872 (OpenTelemetry-Go is the Go implementation of OpenTelemetry.
Prior to v ...)
+ [experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
- golang-opentelemetry-otel <unfixed> (bug #1149049)
[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
NOTE:
https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65
@@ -13190,12 +13191,14 @@ CVE-2026-81872 (OpenTelemetry-Go is the Go
implementation of OpenTelemetry. Prio
NOTE: Introduced with:
https://github.com/open-telemetry/opentelemetry-go/commit/4af9c20a80182e5ac8212182d3ba970d0d558a45
(v1.26.0)
NOTE: Fixed by:
https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582
(v1.45.0)
CVE-2026-81871 (OpenTelemetry-Go is the Go implementation of OpenTelemetry.
Prior to v ...)
+ [experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
- golang-opentelemetry-otel <unfixed> (bug #1149049)
[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
NOTE:
https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q-cm8f-9c5x
NOTE: Introduced with:
https://github.com/open-telemetry/opentelemetry-go/commit/d99c76fa32fbbcf3e1e0cee4c49a7f181b0697bb
(v1.28.0)
NOTE: Fixed by:
https://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6b18dd4cdcb8ac63a0c
(v1.45.0)
CVE-2026-81870 (OpenTelemetry-Go is the Go implementation of OpenTelemetry.
From versi ...)
+ [experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
- golang-opentelemetry-otel <unfixed> (bug #1149049)
[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
NOTE:
https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg
@@ -120694,6 +120697,7 @@ CVE-2026-45432 (This vulnerability exists in GX Earth
ONT models due to the tran
CVE-2026-45431 (This vulnerability exists in GX Earth ONT models due to
improper handl ...)
NOT-FOR-US: GX Earth ONT models
CVE-2026-45287 (OpenTelemetry-Go is the Go implementation of OpenTelemetry.
Prior to v ...)
+ [experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
- golang-opentelemetry-otel <unfixed> (bug #1139168)
[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
[bookworm] - golang-opentelemetry-otel <no-dsa> (Minor issue)
@@ -120733,6 +120737,7 @@ CVE-2026-41234 (Froxlor is open source server
administration software. Prior to
CVE-2026-41207 (The netty incubator codec.bhttp is a java language binary http
parser. ...)
NOT-FOR-US: netty-incubator-codec-ohttp
CVE-2026-41178 (OpenTelemetry-Go is the Go implementation of OpenTelemetry.
Versions 1 ...)
+ [experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
- golang-opentelemetry-otel <unfixed> (bug #1139167)
[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
[bookworm] - golang-opentelemetry-otel <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56ee3053994e79a7af99078f47ea8b93c6c34439
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56ee3053994e79a7af99078f47ea8b93c6c34439
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
