—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA256<\/p>\n
====================================================================
\nRed Hat Security Advisory<\/p>\n
Synopsis: Moderate: Red Hat Camel for Spring Boot 3.18.3 release and security update
\nAdvisory ID: RHSA-2022:8902-01
\nProduct: Red Hat Integration
\nAdvisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:8902
\nIssue date: 2022-12-08
\nCVE Names: CVE-2022-25897 CVE-2022-31684 CVE-2022-42889
\n====================================================================
\n1. Summary:<\/p>\n
A minor version update (from 3.14.5 to 3.18.3) is now available for Camel
\nfor Spring Boot. The purpose of this text-only errata is to inform you
\nabout the security issues fixed in this release.<\/p>\n
Red Hat Product Security has rated this update as having a security impact
\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
\ngives a detailed severity rating, is available for each vulnerability from
\nthe CVE link(s) in the References section.<\/p>\n
2. Description:<\/p>\n
This release of Camel for Spring Boot 3.18.3 serves as a replacement for
\nCamel for Spring Boot 3.14.2 and includes bug fixes and enhancements, which
\nare documented in the Release Notes document linked in the References.<\/p>\n
Security Fix(es):<\/p>\n
* commons-text: apache-commons-text: variable interpolation
\n(CVE-2022-42889)<\/p>\n
* org.eclipse.milo-sdk-server: sdk-server: Denial of Service
\n(CVE-2022-25897)<\/p>\n
* reactor-netty-http: Log request headers in some cases of invalid HTTP
\nrequests (CVE-2022-31684)<\/p>\n
For more details about the security issues, including the impact, CVSS
\nscore, acknowledgments, and other related information, refer to the CVE
\npage(s) listed in the References section.<\/p>\n
3. Solution:<\/p>\n
Before applying this update, make sure all previously released errata
\nrelevant to your system have been applied.<\/p>\n
Installation instructions are available from the Camel for Spring Boot
\n3.18.3 product documentation page.<\/p>\n
https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_integration\/2022.q4\/html\/getting_started_with_camel_spring_boot\/index<\/p>\n
https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_integration\/2022.q4\/html\/camel_spring_boot_reference\/index<\/p>\n
4. Bugs fixed (https:\/\/bugzilla.redhat.com\/):<\/p>\n
2135435 – CVE-2022-42889 apache-commons-text: variable interpolation RCE
\n2136188 – CVE-2022-25897 sdk-server: Denial of Service
\n2141353 – CVE-2022-31684 reactor-netty-http: Log request headers in some cases of invalid HTTP requests<\/p>\n
5. References:<\/p>\n
https:\/\/access.redhat.com\/security\/cve\/CVE-2022-25897
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2022-31684
\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2022-42889
\nhttps:\/\/access.redhat.com\/security\/updates\/classification\/#moderate
\nhttps:\/\/access.redhat.com\/jbossnetwork\/restricted\/listSoftware.html?downloadType=distributions&product=red.hat.integration&version 22-Q4<\/p>\n
6. Contact:<\/p>\n
The Red Hat security contact is <secalert@redhat.com>. More contact
\ndetails at https:\/\/access.redhat.com\/security\/team\/contact\/<\/p>\n
Copyright 2022 Red Hat, Inc.
\n—–BEGIN PGP SIGNATURE—–
\nVersion: GnuPG v1<\/p>\n
iQIVAwUBY5ISGtzjgjWX9erEAQgUiw\/\/Vbl2hAiOE9ePsLSMh2w9RJ0guS6iSayB
\njpOaib0SMTQCJ6jeohGoNuMSSTrWZuYHlaI4B37U1t1EJajgYYquouqjB+plFElD
\nKj4VvoisjqIg98uUZJi6Z1cRw25w7rfFkKhiTt9niQ+35WmrYiDXWLYZlhu6cjGW
\n+oF4yRn36OVKysUYyDyAywgD9K+Ioovk51OmFRcNa+7iQTZwf2q1Pa4OPtkcm2D4
\nqY4d1JJdHiXDVon3Pq0kkyNiJJBqScavZCmGjv+je78kvElkmi1t0IcXPM\/iI2gQ
\nreTbrocj9ObjvcnfV40pm48fgFJ30XNl6f5auwz8wbNCgQFQlN0w6GCQElsW4Ng6
\nP0lPjdGO11GIdgfZHYAJngmrg6L1uhhAVmfGYFo4V1v4zkUoMVjrv0R\/WHVutvVa
\n8zSF4Meky3J9hwgwV85O7MZEcKw4sBrnA4jkxUHDcyX\/X5RHv9Qv\/7ljrumn5srh
\nT+XhDhBTf+jJVfwqjcMTKineiROsfgp1xGggDBABHl\/XU\/ywN3WcDHarXcrhcmTp
\nLZX1xIajFJAaxRNE8KmLSRizSspCWHjGfEa0TuieIkfjg038p1LiofIgCLwbh2kZ
\nNkWX7t1PmCpU\/Z2Q5\/JYqJMzfLUvLnuktbxK2wA3y5ycq14qB5BpVsoK+lX2mnHy
\nQEI4OplCv\/A=diKm
\n—–END PGP SIGNATURE—–
\n—
\nRHSA-announce mailing list
\nRHSA-announce@redhat.com
\nhttps:\/\/listman.redhat.com\/mailman\/listinfo\/rhsa-announce<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat Camel for Spring Boot 3.18.3 release and security update Advisory ID: RHSA-2022:8902-01 Product: Red Hat Integration Advisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:8902 Issue date: 2022-12-08 CVE Names: CVE-2022-25897 CVE-2022-31684 CVE-2022-42889 ==================================================================== 1. Summary: A minor version update (from 3.14.5 to 3.18.3) is now …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-34577","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=34577"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34577\/revisions"}],"predecessor-version":[{"id":34631,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/34577\/revisions\/34631"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=34577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=34577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=34577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}