Red Hat Security Advisory

RHSA-2024:7972

Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.SP1)

Released 2024-10-10 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat build of Apache Camel 4 for Quarkus 3

Fixes 2 records

TI-2024-06719 CVE-2024-7254 · GHSA-735f-pc8j-v9w8

Stack overflow in Protocol Buffers Java Lite

MEDIUM 49

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02772 Published 2024-09-19 Partial fix · 28.2, 3.25.5 +2 CWE-400

TI-2024-31848 CVE-2024-47561 · GHSA-r7pg-v2c8-mfg3

Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

MEDIUM 47

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.03256 Published 2024-10-03 Partial fix · 1.11.4 CWE-502