Golang github rabbitmq amqp091 go: amqp091-go is a Go AMQP 0.9.1 client. (CVE-2026-79921)

This vulnerability, identified as CVE-2026-79921, impacts the opentelemetry-collector-contrib package version 0.159.0-0.1.1.hum1 used in Red Hat Hardened Images RPMs on aarch64 and x86_64 architectures. It is categorized under CWE-770, indicating a resource allocation issue without proper limits or throttling. The advisory from Red Hat confirms the presence of the vulnerability and the availability of an update for the affected RPMs but does not specify a fixed version or detailed patch information. No exploitation in the wild has been reported, and the vulnerability carries a high severity rating based on its CVSS vector (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H).

The vulnerability could allow an attacker to cause resource exhaustion or denial of service conditions due to improper resource allocation controls in the affected package. Given the high severity rating and the nature of CWE-770, the impact is significant in environments using the affected versions of opentelemetry-collector-contrib within Red Hat Hardened Images. No active exploitation has been reported.

Red Hat has issued a security advisory (RHSA-2026:60854) indicating an update is available for the affected RPMs. Users should apply the update to the opentelemetry-collector-contrib package as provided by Red Hat Hardened Images RPMs. Since no explicit fixed version is stated, users should follow Red Hat's official update channels and advisories for the latest remediation guidance. No additional mitigation steps are specified by the vendor.