[Git][security-tracker-team/security-tracker][master] Track fixes via experimental for golang-opentelemetry-otel issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
56ee3053 by Salvatore Bonaccorso at 2026-09-28T05:59:05+02:00
Track fixes via experimental for golang-opentelemetry-otel issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13182,6 +13182,7 @@ CVE-2026-85128 (The Choose User Role at Registration WordPress plugin before 1.3
 CVE-2026-82561 (Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-81872 (OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to v ...)
+	[experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
 	- golang-opentelemetry-otel <unfixed> (bug #1149049)
 	[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
 	NOTE: https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4-fphr-2h65
@@ -13190,12 +13191,14 @@ CVE-2026-81872 (OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prio
 	NOTE: Introduced with: https://github.com/open-telemetry/opentelemetry-go/commit/4af9c20a80182e5ac8212182d3ba970d0d558a45 (v1.26.0)
 	NOTE: Fixed by: https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669aeaec1e98b1df4cc582 (v1.45.0)
 CVE-2026-81871 (OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to v ...)
+	[experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
 	- golang-opentelemetry-otel <unfixed> (bug #1149049)
 	[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
 	NOTE: https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q-cm8f-9c5x
 	NOTE: Introduced with: https://github.com/open-telemetry/opentelemetry-go/commit/d99c76fa32fbbcf3e1e0cee4c49a7f181b0697bb (v1.28.0)
 	NOTE: Fixed by: https://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6b18dd4cdcb8ac63a0c (v1.45.0)
 CVE-2026-81870 (OpenTelemetry-Go is the Go implementation of OpenTelemetry. From versi ...)
+	[experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
 	- golang-opentelemetry-otel <unfixed> (bug #1149049)
 	[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
 	NOTE: https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-8wmf-6v46-5gfg
@@ -120694,6 +120697,7 @@ CVE-2026-45432 (This vulnerability exists in GX Earth ONT models due to the tran
 CVE-2026-45431 (This vulnerability exists in GX Earth ONT models due to improper handl ...)
 	NOT-FOR-US: GX Earth ONT models
 CVE-2026-45287 (OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to v ...)
+	[experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
 	- golang-opentelemetry-otel <unfixed> (bug #1139168)
 	[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
 	[bookworm] - golang-opentelemetry-otel <no-dsa> (Minor issue)
@@ -120733,6 +120737,7 @@ CVE-2026-41234 (Froxlor is open source server administration software. Prior to
 CVE-2026-41207 (The netty incubator codec.bhttp is a java language binary http parser. ...)
 	NOT-FOR-US: netty-incubator-codec-ohttp
 CVE-2026-41178 (OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1 ...)
+	[experimental] - golang-opentelemetry-otel 1.46.0-1~exp1
 	- golang-opentelemetry-otel <unfixed> (bug #1139167)
 	[trixie] - golang-opentelemetry-otel <no-dsa> (Minor issue)
 	[bookworm] - golang-opentelemetry-otel <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56ee3053994e79a7af99078f47ea8b93c6c34439

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56ee3053994e79a7af99078f47ea8b93c6c34439
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/53b12dbe/attachment-0001.htm>