The security advisories RHSA-2026:25039 and RHSA-2026:25245 from Red Hat Product Security announce updates to Red Hat Hardened Images RPMs, specifically for opentelemetry-collector-contrib and jaeger packages. These updates address several vulnerabilities identified by CVEs including CVE-2026-42154, CVE-2026-44431, CVE-2026-44432, and CVE-2026-48990 among others. The advisories list affected versions across multiple version ranges and architectures (aarch64, x86_64). The advisories do not provide explicit patch details or technical descriptions of the vulnerabilities but indicate that updated RPMs are available. No known exploits in the wild are reported, and the advisories direct users to Red Hat's image repository for applying updates.

The vulnerabilities addressed by these advisories are rated as high severity. They affect Red Hat Hardened Images RPMs including opentelemetry-collector-contrib and jaeger packages. The specific impact details are not described in the advisory content, but the presence of multiple CVEs and CWE identifiers such as CWE-256 (Plaintext Storage of a Password), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-201 (Information Exposure), CWE-409 (Double Free), and CWE-915 (Improperly Controlled Modification of Dynamically-Managed Code) suggest potential risks related to information exposure, resource management, and memory handling. No active exploitation has been reported.

Red Hat has released updated RPM packages for the affected components. Users should apply the updates as provided by Red Hat Hardened Images repositories to remediate the vulnerabilities. The advisories do not indicate that no action is required or that the issues are already mitigated. Therefore, applying the official updates is the recommended mitigation. For detailed update instructions, users should refer to https://images.redhat.com/ and the Red Hat security advisory pages. Since this is not a cloud service, remediation depends on user action to apply the updated packages.