RHSA-2026:25245HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
June 11, 2026
Last Modified
October 15, 2026

🔗 CVE IDs covered (2)

CVE-2026-42151 →CVE-2026-42154 →

📋 Description

CVE-2026-42151 — github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API CVE-2026-42154 — github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint

🎯 Affected products4

  • Red Hat Hardened Images
  • opentelemetry-collector-0:0.153.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • opentelemetry-collector-0:0.153.0-1.hum1@src as a component of Red Hat Hardened Images
  • opentelemetry-collector-0:0.153.0-1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.

🔗 References (6)