The following advisory data is extracted from:

https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9167.json

Red Hat officially shut down their mailing list notifications October 10, 2023.  Due to this, Packet Storm has recreated the below data as a reference point to raise awareness.  It must be noted that due to an inability to easily track revision updates without crawling Red Hat's archive, these advisories are single notifications and we strongly suggest that you visit the Red Hat provided links to ensure you have the latest information available if the subject matter listed pertains to your environment.

- Packet Storm Staff




====================================================================
Red Hat Security Advisory

Synopsis:           Important: Red Hat build of OpenTelemetry 3.6.0 release
Advisory ID:        RHSA-2025:9167-03
Product:            Red Hat OpenShift distributed tracing
Advisory URL:       https://access.redhat.com/errata/RHSA-2025:9167
Issue date:         2025-06-17
Revision:           03
CVE Names:          CVE-2025-22868
====================================================================

Summary: 

Red Hat build of OpenTelemetry 3.6.0 has been released




Description:


Breaking changes:
* Nothing

Deprecations:
* Nothing

Technology Preview features:

* Cumulative-to-Delta Processor
Enhancements:
* The following Technology Preview features reach General Availability:

  * Kafka Exporter

  * Attributes Processor

  * Resource Processor

  * Prometheus Receiver

* With this update, the OpenTelemetry Collector can read TLS certificates in the `tss2` format according to the TPM Software Stack specification (TSS) 2.0 of the Trusted Platform Module (TPM) 2.0 Library by the Trusted Computing Group (TCG).
* With this update, the Red Hat build of OpenTelemetry Operator automatically upgrades all OpenTelemetryCollector custom resources during its startup. The Operator reconciles all managed instances during its startup. If there is an error, the Operator retries the upgrade at exponential backoff. If an upgrade fails, the Operator will retry the upgrade again when it restarts.
Bug fixes:
* Nothing
Known issues:
  There is currently a known issue with the following exporters:

    * AWS CloudWatch Logs Exporter
    * AWS EMF Exporter
    * AWS X-Ray Exporter

  This known issue affects deployments that use the optional endpoint field of the exporter configuration in the Collector custom resource. Not specifying the protocol, such as https://, as part of the endpoint value results in the unsupported protocol scheme error. Workaround: Include the protocol, such as https://, as part of the endpoint value.


Solution:

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators



CVEs:

CVE-2025-22868

References:

https://access.redhat.com/security/cve/CVE-2025-22868
https://access.redhat.com/security/cve/CVE-2025-27144
https://access.redhat.com/security/cve/CVE-2025-29786
https://access.redhat.com/security/cve/CVE-2025-30204
https://access.redhat.com/security/updates/classification/
https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry