Lucene search
RedHatRHSA-2024:1948HistoryApr 22, 2024 - 1:28 p.m.
(RHSA-2024:1948) Important: Red Hat Build of Apache Camel 3.18 for Quarkus 2.13 is now available (updates to RHBQ 2.13.9.SP2)
2024-04-2213:28:12
access.redhat.com
9
red hat
apache camel
quarkus
security updates
cve-2024-28752
aegis databinding
cve-2024-25710
commons-compress
dump file
cve-2024-26308
outofmemoryerror
pack200
unix
An update for Red Hat Build of Apache Camel 3.18 for Quarkus 2.13 is now available (updates to RHBQ 2.13.9.SP2).
The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products:
- TRIAGE CVE-2024-28752 cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding
- TRIAGE CVE-2024-25710 commons-compress: Denial of service caused by an infinite loop for a corrupted DUMP file
- TRIAGE CVE-2024-26308 commons-compress: OutOfMemoryError unpacking broken Pack200 file
Related
redhat
redhat
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Apache Commons Compress may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2024-26308 & CVE-2024-25710)
2024-04-30 07:32:22
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0726-1)
2024-03-01 00:00:00
Apache Commons Compress 1.21 < 1.26.0 DoS Vulnerability
2024-02-20 00:00:00
Apache Commons Compress 1.3 < 1.26.0 DoS Vulnerability
2024-02-20 00:00:00
nessus
nessus
Apache CXF < 3.5.8, 3.6.x < 3.6.3, 4.0.x < 4.0.4 SSRF
2024-03-22 00:00:00
RHEL 6 : commons-compress (Unpatched Vulnerability)
2024-06-03 00:00:00
osv
osv
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-15 12:30:37
CVE-2024-26308
2024-02-19 09:15:38
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
2024-02-19 09:30:52
cgr
cgr
CVE-2024-28752 vulnerabilities
2024-05-19 03:07:16
CVE-2024-26308 vulnerabilities
2024-05-19 03:07:16
CVE-2024-25710 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
wolfi
wolfi
CVE-2024-28752 vulnerabilities
2024-06-15 21:08:13
CVE-2024-26308 vulnerabilities
2024-06-15 21:08:13
CVE-2024-25710 vulnerabilities
2024-06-15 21:08:13
veracode
veracode
Server-Side Request Forgery (SSRF)
2024-03-18 08:35:48
Denial Of Service (DoS)
2024-02-20 06:39:51
Denial Of Service (DoS)
2024-02-20 06:21:30
nvd
nvd
cve
cve
cvelist
cvelist
github
github
SSRF vulnerability using the Aegis DataBinding in Apache CXF
2024-03-15 12:30:37
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
2024-02-19 09:30:52
debiancve
debiancve
CVE-2024-26308
2024-02-19 09:15:38
CVE-2024-25710
2024-02-19 09:15:37
ubuntucve
ubuntucve
CVE-2024-26308
2024-02-19 00:00:00
CVE-2024-25710
2024-02-19 00:00:00
prion
prion
Code injection
2024-02-19 09:15:00
Design/Logic Flaw
2024-02-19 09:15:00
amazon
amazon
Important: apache-commons-compress
2024-03-13 20:26:00
atlassian
atlassian
Bitbucket Data Center is affected by CVE-2024-25710
2024-04-03 08:56:14
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00