RHSA-2023:5780: Important: Red Hat Integration Camel Extensions for Quarkus 2.13.3 security update
A security update for Camel Extensions for Quarkus 2.13.3 is now available (updates to RHBQ 2.13.8.SP3). The purpose of this text-only erratum is to inform you about the security issues fixed.Security Fix(es): netty-codec-http2: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section. jetty-http: jetty: Improper validation of HTTP/1 content-length (CVE-2023-40167) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: Red Hat Integration Camel Extensions for Quarkus 2.13.3 security update
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:5780?
The severity of RHSA-2023:5780 is high.
What is the affected software of RHSA-2023:5780?
The affected software of RHSA-2023:5780 is Red Hat Integration - Camel Extensions for Quarkus version 2.13.3.
How do I fix RHSA-2023:5780?
To fix RHSA-2023:5780, apply the security update provided by Red Hat.
Where can I find more information about RHSA-2023:5780?
You can find more information about RHSA-2023:5780 on the Red Hat customer portal or Bugzilla.