RHSA-2025:11662MediumCVSS 7.0

Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.5.1 release

Published
July 23, 2025
Last Modified
August 16, 2026

🔗 CVE IDs covered (3)

CVE-2024-34397 →CVE-2024-52533 →CVE-2025-4373 →

📋 Description

CVE-2024-34397 — glib2: Signal subscription vulnerabilities CVE-2024-52533 — glib: buffer overflow in set_connect_msg() CVE-2025-4373 — glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar

🎯 Affected products34

  • Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:31e117f467424af472a05c52c52397e949cf7838bce643a3d9d24c0f57a06458_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:389b9cbd0f05d3d773edc2c06aa73818307cbb25048bddf4f192a992670b6fb4_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:6a121606c51dfdbc691ede3d4ba9e97f7e200ae422fef0802a579c601b1b3ee6_s390x as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:a891aa3f77d70d9d7966dfc71ff9087f45deb95d3025072da96a3ec5220db1f3_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:3b00e2fec645e140fa304e5823bcb1d0fcd1ddac7f4cbf6e9a9c0fbeaf29682d_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:9ec57ba506861f7037198253c6463991fa548b8e9f5a3d2c78e1f1257d31aeab_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:d9ca4a9ec5bc8de23e4550387f822f19949cdfbc4aeeab20e07b206d92f4a426_s390x as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:ef03839a45320399533becb174479f9ea4f26f381202707936d576ec6fc9ba84_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:3dc773cc4a48041bfe69b516db58d2a5060059725351fc1dbcece64778a35b3a_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:438037a860968172a29c12ef14353081a5fd45ffe2e5dcccd3ab5486a5824578_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a15009fde9c0a63168d82fb07363d2c6ce05f2096dc1a9992a09fe1d76bcf4a7_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:addf7b49ce99777a3bbf12c2e6678b604f3cfaf91feaaeb4192d75e902e46458_s390x as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:3d98512aaa924e0e1c9f3b5ab6b405cb4f4a3f3b5225aefa54f1b2abfbe3d769_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:caadc05a8195f41d48d502458183cef05a1011c6edee343ac212b873ae98c763_s390x as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:d0ee4c371754848f57e6b7c5fcf716a7d830cd72b65b8aeb30e78a8e26b40548_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:d4ef54ac8de0eaf22e294dad8852ea8b5c20f85deb19629a3a4e0020851266c3_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:1c4617b035c66b6b34e9b19f618f72a19da5fce644d79e24eb262f14c848bc81_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:57d3bf93431295f0d3c8747fe376cdb0a06dc344dd1d6b0c838f732bd920c73e_s390x as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:b91fe4769ad1e0cf809e3db4d494a5526608b2fa2114fc5e28624372858bb203_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:fe1c8fe5bdc4114a4718812d718fc6b913465e23fd39cf6aa05acb352bd80874_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:03f466002ae14ef14dd0e82e0ab75c5287295f77598eed8aca6d1ac6aaa11928_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:1784f71c94bd42380b88033411db9bb912ad2f321a8a6d8d7c49e029263ef714_s390x as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:2e6d535aa3208ca8ae1bc588393c8bc499c4bfb452aceca047523502ddffa0ed_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:8c5dddd29d08fe8234edbbcda055fe6b0f9a7d7a0edfc3cd130797fdf78cce5c_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-operator-bundle@sha256:be3feca3b19ac609e5ef829887b6d03ca3c504163ed0f9e10b2410cdfb175b72_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:03f040cf94f7d8125f2e68bde45faa956dc9e70fef6307313e42af5de9bbfda0_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:201d1bd33f7e22c463aaf94b4f84e4610f129affd8a96efb8722aabfbc612bfd_s390x as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:3d37f30462f237f5087ef8ac90e39f5cd2cbaf5c143f7cae9d6155eb574726f2_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.0
  • registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:8fce6e29d98acc1dd0a832cdb5c913af3edd65b81b2968fbdbf8ab434d82fe1e_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.0
  • +4 more not shown

✅ Remediation

For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/operators/administrator-tasks#olm-upgrading-operators Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Currently, no mitigation is available for this vulnerability.

🔗 References (7)