A security update for the Red Hat build of OpenTelemetry Collector addresses a vulnerability where sensitive HTTP headers were not cleared during cross-origin redirects in the net/http package (CVE-2025-4673). This issue has been rated as having a moderate security impact by Red Hat Product Security. The update is available for Red Hat Enterprise Linux 9.4 Extended Update Support and related variants. Users are advised to apply the update as detailed in the Red Hat advisory.