< back to search

gpp_maybe Security update for alloy
SUSE-SLES-16.0-747

This update for alloy fixes the following issues Security issues: - CVE-2026-4427: github.com/jackc/pgproto3/v2: improper validation of field length allows a malicious PostgreSQL server to crash a client application via a DataRow message (bsc#1259919). - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files (bsc#1258099). - CVE-2026-26958: filippo.io/edwards25519: failure to initialize receiver in MultiScalarMult can produce invalid results and lead to undefined behavior (bsc#1258609). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260317). Non security issue: - Updated to 1.16.0 - Use systemd tmpfiles.d to create /var/lib/alloy hierarchy (jsc#PED-14815)

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64
  • Packages
    alloy
    OpenTelemetry Collector distribution with programmable pipelines
    1.16.0-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
  • Packages
    alloy
    OpenTelemetry Collector distribution with programmable pipelines
    1.16.0-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
  • Packages
    alloy
    OpenTelemetry Collector distribution with programmable pipelines
    1.16.0-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
  • Packages
    alloy
    OpenTelemetry Collector distribution with programmable pipelines
    1.16.0-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
  • Packages
    alloy
    OpenTelemetry Collector distribution with programmable pipelines
    1.16.0-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
  • Packages
    alloy
    OpenTelemetry Collector distribution with programmable pipelines
    1.16.0-160000.1.1 lock rpm