VDB
RHSA-2025:11662
RHSA-2025:11662
PUBLISHED
CVSS 4.800000190734863 MEDIUM
A flaw was found in GNOME GLib. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This issue could lead to the GDBus-based client behaving incorrectly with an application-dependent impact.
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:d4ef54ac8de0eaf22e294dad8852ea8b5c20f85deb19629a3a4e0020851266c3_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-all-in-one-rhel8@sha256:d9ca4a9ec5bc8de23e4550387f822f19949cdfbc4aeeab20e07b206d92f4a426_s390x as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:57d3bf93431295f0d3c8747fe376cdb0a06dc344dd1d6b0c838f732bd920c73e_s390x as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:2e6d535aa3208ca8ae1bc588393c8bc499c4bfb452aceca047523502ddffa0ed_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:1784f71c94bd42380b88033411db9bb912ad2f321a8a6d8d7c49e029263ef714_s390x as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:a891aa3f77d70d9d7966dfc71ff9087f45deb95d3025072da96a3ec5220db1f3_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:8fb68adefecd8ccb94404399ac6c8038c064c85287f4f980a0855da1cbd0dcb7_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-es-rollover-rhel8@sha256:fe1c8fe5bdc4114a4718812d718fc6b913465e23fd39cf6aa05acb352bd80874_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-rhel8-operator@sha256:8d7c966e19b03dc4b7f123c9f4096ed4267be5596d08958f4c75a88b3bc541da_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:addf7b49ce99777a3bbf12c2e6678b604f3cfaf91feaaeb4192d75e902e46458_s390x as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:caadc05a8195f41d48d502458183cef05a1011c6edee343ac212b873ae98c763_s390x as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:389b9cbd0f05d3d773edc2c06aa73818307cbb25048bddf4f192a992670b6fb4_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:3dc773cc4a48041bfe69b516db58d2a5060059725351fc1dbcece64778a35b3a_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:d0ee4c371754848f57e6b7c5fcf716a7d830cd72b65b8aeb30e78a8e26b40548_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:8fce6e29d98acc1dd0a832cdb5c913af3edd65b81b2968fbdbf8ab434d82fe1e_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-es-index-cleaner-rhel8@sha256:3d98512aaa924e0e1c9f3b5ab6b405cb4f4a3f3b5225aefa54f1b2abfbe3d769_amd64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-agent-rhel8@sha256:6a121606c51dfdbc691ede3d4ba9e97f7e200ae422fef0802a579c601b1b3ee6_s390x as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-collector-rhel8@sha256:a15009fde9c0a63168d82fb07363d2c6ce05f2096dc1a9992a09fe1d76bcf4a7_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-ingester-rhel8@sha256:8c5dddd29d08fe8234edbbcda055fe6b0f9a7d7a0edfc3cd130797fdf78cce5c_ppc64le as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
| Red Hat | registry.redhat.io/rhosdt/jaeger-query-rhel8@sha256:03f040cf94f7d8125f2e68bde45faa956dc9e70fef6307313e42af5de9bbfda0_arm64 as a component of Red Hat OpenShift distributed tracing 3.6.1 | * |
…and 13 more
Timeline
- Jul 23, 2025 CVE Published
- Aug 23, 2026 CVE Updated
- Aug 23, 2026 Distribution Patch
- Aug 23, 2026 Distribution Patch
- Aug 23, 2026 Security Advisory
- Aug 23, 2026 Security Advisory
- Aug 23, 2026 Security Advisory
- Aug 23, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:11662 advisory
- https://access.redhat.com/security/cve/CVE-2024-34397 advisory
- https://access.redhat.com/security/cve/CVE-2024-52533 advisory
- https://access.redhat.com/security/cve/CVE-2025-4373 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-jaeger advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11662.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2279632 issue
- https://www.cve.org/CVERecord?id=CVE-2024-34397 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34397 advisory
- https://gitlab.gnome.org/GNOME/glib/-/issues/3268 advisory
- https://www.openwall.com/lists/oss-security/2024/05/07/5 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2325340 issue
- https://www.cve.org/CVERecord?id=CVE-2024-52533 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-52533 advisory
- https://gitlab.gnome.org/GNOME/glib/-/issues/3461 advisory
- https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1 advisory
- https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2364265 issue
- https://www.cve.org/CVERecord?id=CVE-2025-4373 advisory
…and 2 more