Skip to content

v1.14.2

Latest
Latest

Choose a tag to compare

View all tags
@malud malud released this 28 Apr 09:22
v1.14.2
d85f6fb
This commit was signed with the committer’s verified signature.
malud Marcel Ludwig
SSH Key Fingerprint: AzG6Ckftw1RyVI/4u12gFD/uduMh8xENat87AvIKyk0
Verified
Learn about vigilant mode.

Security patch release

Addresses three high-severity OpenTelemetry advisories.

Security

  • go.opentelemetry.io/otel 1.43.0 — fix multi-value baggage header DoS amplification (GHSA-mh2q-q3fh-2475)
  • go.opentelemetry.io/otel/sdk 1.43.0 — fix PATH hijacking via BSD kenv not using absolute path (GHSA-hfvc-g4fc-pqhx) and arbitrary code execution via PATH hijacking (GHSA-9h8m-3fm2-qjrq)

Dependencies

  • go.opentelemetry.io/otel and otel/sdk, otel/metric, otel/trace, otel/exporters/otlp/otlptrace*, otel/exporters/otlp/otlpmetric/otlpmetricgrpc 1.39.0/1.38.0 → 1.43.0
  • go.opentelemetry.io/otel/exporters/prometheus 0.60.0 → 0.64.0
  • google.golang.org/grpc 1.79.3 → 1.80.0
  • golang.org/x/net 0.48.0 → 0.52.0, golang.org/x/crypto 0.46.0 → 0.49.0 (transitive)

Built with Go 1.26.2.

Full changelog: v1.14.1...v1.14.2

Assets 10
Loading