RHSA-2023:5441MediumCVSS 8.2

Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.0 release and security update

Published
October 4, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (8)

CVE-2023-26049 →CVE-2023-33008 →CVE-2023-34462 →CVE-2023-40167 →CVE-2022-44729 →CVE-2022-44730 →CVE-2022-46751 →CVE-2023-26048 →

📋 Description

CVE-2022-44729 — batik: Server-Side Request Forgery vulnerability CVE-2022-44730 — batik: Server-Side Request Forgery vulnerability CVE-2022-46751 — apache-ivy: XML External Entity vulnerability CVE-2023-26048 — jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() CVE-2023-26049 — jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies CVE-2023-33008 — apache-johnzon: Prevent inefficient internal conversion from BigDecimal at large scale CVE-2023-34462 — netty: SniHandler 16MB allocation leads to OOM CVE-2023-40167 — jetty: Improper validation of HTTP/1 content-length

🎯 Affected products1

  • RHINT Camel-Springboot 4.0.0

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update). Workaround: Configuration of SniHandler with an idle timeout will mitigate this issue.

🔗 References (12)