Moderate: Red Hat Security Advisory: Red Hat Camel for Spring Boot 3.18.3 release and security update

A minor version update from 3.14.5 to 3.18.3 is now available for Camel for Spring Boot. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

com.digitalpetri.opcua:uanodeset-parser (=0.4.0), com.festo.aas:p4m-helpers (>=1.0.0 <=1.0.4) +59 more potentially affected by CVE-2022-25897 via org.eclipse.milo:sdk-server (>=0.1.0 <=0.6.7)

org.eclipse.milo:sdk-server MAVEN version =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.2.0, =0.2.0, =0.2.6 - de.fraunhofer.iosb.ilt.faaast.client:core =1.1.0 and more Source cves: CVE-2022-25897 Source advisory: OSV:GHSA-FPH9-F5R6-VHQF...

CVE-2022-25897

The CVE-2022-25897 issue affects the Eclipse Milo SDK-Server (org.eclipse.milo:sdk-server) prior to version 0.6.8. The root cause is a memory‑consumption bypass in CloseSession handling when deleteSubscription is False, allowing a denial of service via repeated CloseSession requests. The Red Hat ...

CVE-2022-25897 Denial of Service (DoS)

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

CVE-2022-25897

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...