Red Hat Security AdvisoryRHSA-2025:11662
Red Hat OpenShift distributed tracing platform (Jaeger) 3.5.1 release
Released 2025-07-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift distributed tracing 3.6.0 registry.redhat.io/rhosdt/jaeger-agent-rhel8, registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8, registry.redhat.io/rhosdt/jaeger-collector-rhel8 +6
Fixes 3 records
Priority MEDIUM 52
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01507 · Published 2024-11-11 · Partial fix CWE-120
Priority LOW 25
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1.
CVSS 3.1MEDIUM 5.2· Physical · No auth · No interaction · EPSS 0.00763 · Published 2024-05-07 · Partial fix CWE-290
Priority LOW 23
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00647 · Published 2025-05-06 · Partial fix · 2.84.2, 2.80.4-4.el10_0.6 +18 CWE-124
