Read the docs
Red Hat Security Advisory

RHSA-2024:0789

Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final)

Released 2024-02-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354
TI-2023-03751 CVE-2023-4043 · GHSA-g8p6-p27c-52fx

Parsson DoS when parsing numbers from untrusted sources

Priority LOW 35

In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2023-11-03 Partial fix · 1.0.5, 1.1.4 CWE-20
TI-2023-23977 CVE-2023-44483 · GHSA-xfrj-6vvc-3xm2

Apache Santuario: Private Key disclosure in debug-log output

Priority LOW 32

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML S…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01547 Published 2023-10-20 Partial fix · 2.2.6, 2.3.4 +1 CWE-532