RHSA-2025:9167 - Security Advisory

Topic

Red Hat build of OpenTelemetry 3.6.0 has been released

Description

Breaking changes:

• Nothing

Deprecations:

• Nothing

Technology Preview features:

• Cumulative-to-Delta Processor

Enhancements:

• The following Technology Preview features reach General Availability:
• Kafka Exporter
• Attributes Processor
• Resource Processor
• Prometheus Receiver
• With this update, the OpenTelemetry Collector can read TLS certificates in the `tss2` format according to the TPM Software Stack specification (TSS) 2.0 of the Trusted Platform Module (TPM) 2.0 Library by the Trusted Computing Group (TCG).
• With this update, the Red Hat build of OpenTelemetry Operator automatically upgrades all OpenTelemetryCollector custom resources during its startup. The Operator reconciles all managed instances during its startup. If there is an error, the Operator retries the upgrade at exponential backoff. If an upgrade fails, the Operator will retry the upgrade again when it restarts.

Bug fixes:

• Nothing

Known issues:
There is currently a known issue with the following exporters:

• AWS CloudWatch Logs Exporter
• AWS EMF Exporter
• AWS X-Ray Exporter

This known issue affects deployments that use the optional endpoint field of the exporter configuration in the Collector custom resource. Not specifying the protocol, such as https://, as part of the endpoint value results in the unsupported protocol scheme error. Workaround: Include the protocol, such as https://, as part of the endpoint value.

Solution

For details on how to apply this update, refer to:
https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators

Fixes

• TRACING-5121 - Support OpenTelemetry delta temporality metrics - Dynatrace AI effort
• TRACING-5034 - Improve error message when creating/upgrading collector instance and using API version opentelemetry.io/v1beta1
• TRACING-5362 - Add tailbased sampling processor

CVEs

• CVE-2025-22868
• CVE-2025-27144
• CVE-2025-29786
• CVE-2025-30204

References

• https://access.redhat.com/security/updates/classification/
• https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry