An update for Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 is now available (updates to RHBQ 3.2.10.Final). The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products.
Security Fix(es):
parsson: Denial of Service due to large number parsing (CVE-2023-4043)
santuario: Private Key disclosure in debug-log output (CVE-2023-44483)
ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
json-path: stack-based buffer overflow in Criteria.parse method (CVE-2023-51074)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.