This security advisory from Red Hat Product Security announces the release of Red Hat OpenShift distributed tracing platform (Jaeger) 3.5.2, which addresses three security vulnerabilities: CVE-2025-7425, CVE-2025-8058, and CVE-2025-32415. These vulnerabilities involve memory management errors such as use-after-free, double free, and out-of-bounds read conditions (CWE-416, CWE-415, CWE-125). The update provides security improvements without introducing breaking changes or new features. The vendor advisory confirms that upgrading to version 3.5.2 resolves these issues. No exploits are currently known in the wild, and the affected product versions include Red Hat OpenShift distributed tracing 3.5.1 and related container images. The advisory includes detailed references and instructions for applying the update.

The vulnerabilities fixed in this release could potentially allow attackers to exploit memory corruption issues, which may lead to application crashes or other unintended behavior. However, no known exploits have been reported in the wild. The impact is rated as high severity by the vendor, reflecting the potential risk if these vulnerabilities were exploited.

Red Hat has released version 3.5.2 of the OpenShift distributed tracing platform (Jaeger) which includes fixes for the identified vulnerabilities. Users should upgrade to this version following Red Hat's documented procedures for updating OpenShift operators. Since this is an official fix, applying the update fully mitigates the security issues. No additional mitigations are specified or required beyond applying the update.