Lucene search

K
redhatRedHatRHSA-2024:0789
HistoryFeb 12, 2024 - 4:00 p.m.

(RHSA-2024:0789) Important: Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final)

2024-02-1216:00:17
access.redhat.com
16
red hat build
apache camel
quarkus
security enhancements
denial of service
private key disclosure
prefix truncation attack
buffer overflow
cve-2023-4043
cve-2023-44483
cve-2023-48795
cve-2023-51074

7.7 High

AI Score

Confidence

Low

0.962 High

EPSS

Percentile

99.5%

An update for Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 is now available (updates to RHBQ 3.2.10.Final). The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products.

Security Fix(es):

  • parsson: Denial of Service due to large number parsing (CVE-2023-4043)

  • santuario: Private Key disclosure in debug-log output (CVE-2023-44483)

  • ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)

  • json-path: stack-based buffer overflow in Criteria.parse method (CVE-2023-51074)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.