Red Hat Security AdvisoryRHSA-2025:3543
Red Hat Build of Apache Camel 4.8.5 for Spring Boot security update.
Released 2025-04-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Apache Camel 4.8.5 for Spring Boot
Fixes 5 records
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority HIGH 72
A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00582 · Published 2025-02-05 · Partial fix · 2.5.2 CWE-674
Priority HIGH 70
Bypass/Injection vulnerability in Apache Camel components under particular conditions.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.97057 · Published 2025-03-09 · Partial fix · 4.10.2, 4.8.5 +1 CWE-178
Priority LOW 35
BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.0061 · Published 2025-03-20 · Partial fix · 5.7.16, 5.8.18 +5 CWE-287
Priority LOW 35
A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01234 · Published 2025-03-12 · Partial fix · 6.4.2, 6.9.0 CWE-1325
THREATIST.IORead the docs