open-telemetry / opentelemetry-cpp-contrib

https://opentelemetry.io/
Apache License 2.0
125 stars 140 forks source link

Support NGINX 1.26.1 (stable) and 1.27.0 (Main) #471

Open wcawthron opened 3 months ago

wcawthron commented 3 months ago

Describe your environment At present, my NGINX versions have required patching for major vulnerabilities found in 1.26.0 and 1.25.5. With these having been patched, the OTEL module is no longer compatible resulting in a loss of telemetry data for these installations.

Steps to reproduce Download current webserver release of v1.1.0

What is the expected behavior? Module available for patched and at present secure versions of nginx.

What is the actual behavior? Module only available for versions with know high vulnerabilities.

Additional context Current vulnerabilities for 1.26.0 and 1.25.5 are available here: https://nginx.org/en/security_advisories.html Upgrading to 1.26.1 and 1.27.0 is the current requirement to maintain a secure environment.