RHSA-2023:3740: Important: Red Hat Integration Camel for Spring Boot 3.20.1 Patch 1 release security update
This release of Camel for Spring Boot 3.20.1.P1 serves as a replacement for Camel for Spring Boot 3.20.1 and includes bug fixes and enhancements, which are documented in the Release Notes linked in the References. The purpose of this text-only errata is to inform you about the security issues fixed.Security Fix(es): vertx-web: StaticHandler disclosure of classpath resources on Windows when mounted on a wildcard route (CVE-2023-24815) spring-boot: Spring Boot Welcome Page DoS Vulnerability (CVE-2023-20883) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:3740?
The severity of RHSA-2023:3740 is classified as important.
How do I fix RHSA-2023:3740?
To fix RHSA-2023:3740, you should upgrade to Camel for Spring Boot 3.20.1.P1.
What is the purpose of RHSA-2023:3740?
The purpose of RHSA-2023:3740 is to address bug fixes and enhancements in the Camel for Spring Boot framework.
Is RHSA-2023:3740 applicable to my system?
RHSA-2023:3740 is applicable to systems using Camel for Spring Boot version 3.20.1.
Are there any known vulnerabilities related to RHSA-2023:3740?
Yes, RHSA-2023:3740 addresses security vulnerabilities documented in the release notes.