This Red Hat security advisory (RHSA-2026:25039) provides an update for Red Hat Hardened Images RPMs, including the jaeger package version 2.19.0-1.hum1 for aarch64 and x86_64 architectures. It addresses four CVEs: CVE-2026-42154, CVE-2026-44431, CVE-2026-44432, and CVE-2026-48990. The advisory does not specify affected versions or detailed vulnerability descriptions beyond referencing the CVEs and CWEs (CWE-770, CWE-201, CWE-409). No CVSS scores are provided. The update is described as a bug fix and enhancement with no known exploits reported. The vendor advisory does not explicitly confirm patch availability but implies the update includes fixes.

The vulnerabilities are rated as high severity by the source data. The specific impact details are not provided in the advisory, but the associated CWEs suggest issues related to improper resource management, information exposure, and concurrency problems. No known exploits in the wild have been reported, indicating limited or no active exploitation at this time.

The vendor advisory indicates an update is available for Red Hat Hardened Images RPMs, including the jaeger package version 2.19.0-1.hum1, which addresses the vulnerabilities. Users should apply this update as per Red Hat's instructions available at https://images.redhat.com/. Patch status is effectively confirmed by the advisory since it provides an updated package version. No additional mitigation steps are specified or required beyond applying the update.