Issued at: 2025-07-29
Updated at: 2025-07-29
Synopsis
Important: opentelemetry-collector security update
Description
Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry
Security Fix(es):
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 aarch64
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2354195
CVEs
CVE-2025-30204
Affected packages
Rocky Linux 9 aarch64 - AppStream
opentelemetry-collector-0:0.107.0-10.el9_5.aarch64.rpm
opentelemetry-collector-0:0.107.0-10.el9_5.src.rpm
Rocky Linux 9 ppc64le - AppStream
opentelemetry-collector-0:0.107.0-10.el9_5.ppc64le.rpm
opentelemetry-collector-0:0.107.0-10.el9_5.src.rpm
Rocky Linux 9 s390x - AppStream
opentelemetry-collector-0:0.107.0-10.el9_5.s390x.rpm
opentelemetry-collector-0:0.107.0-10.el9_5.src.rpm
Rocky Linux 9 x86_64 - AppStream
opentelemetry-collector-0:0.107.0-10.el9_5.src.rpm
opentelemetry-collector-0:0.107.0-10.el9_5.x86_64.rpm