Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Jaeger container images may lack latest security fixes

published 25 days ago

Summary

The Jaeger images provided by Red Hat had a packaging error that could prevent recent security updates from being applied. This could leave the software more exposed than expected. Apply the latest Red Hat Hardened Images update to ensure all fixes are included.

What to do

Update redhat jaeger to version 0:2.20.0-0.11.hum1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:hummingbird:1	redhat	jaeger	< 0:2.20.0-0.11.hum1 Fix: upgrade to 0:2.20.0-0.11.hum1

Original advisory text

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

References

https://access.redhat.com/errata/RHSA-2026:69544 Vendor Advisory
https://images.redhat.com/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-102422 Third Party Advisory
https://access.redhat.com/security/updates/classification/ Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69544.... Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2542933 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-102422 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-102422 Vendor Advisory
https://github.com/ljharb/shell-quote Third Party Advisory
https://github.com/ljharb/shell-quote/commit/6002b2ed90c6b83095eb272b6b0adaf3a17... Third Party Advisory
https://github.com/ljharb/shell-quote/security/advisories/GHSA-pqg4-j6r4-53mv Third Party Advisory
https://www.npmjs.com/package/shell-quote Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

8.1 High

Timeline

Published10 Oct 2026

Updated10 Oct 2026

First seen10 Oct 2026

Sources

RHSA-2026:69544 · OSV

Track software like this

Free during beta