RHSA-2026:95622: Important: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP3)

An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP3).The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products: vertx-grpc-server: vertx-grpc-server: Denial of Service via compression bomb [rhboac-camel-quarkus-3] (CVE-2026-102477) guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization [rhboac-camel-quarkus-3] (CVE-2026-102554) vertx-web: vertx-web: Authorization bypass via ChainAuthHandler scope validation failure [rhboac-camel-quarkus-3] (CVE-2026-102460) jetty-client: jetty-client: Information disclosure via improper proxy authentication handling [rhboac-camel-quarkus-3] (CVE-2026-77711) snappy-java: snappy-java: Denial of Service via unbounded memory allocation during decompression [rhboac-camel-quarkus-3] (CVE-2026-108106) cxf-rt-ws-security: Apache CXF: Authentication bypass via hash collision in token cache [rhboac-camel-quarkus-3] (CVE-2026-97468) cxf-rt-ws-security: Apache CXF: Authentication bypass via shared token validation state [rhboac-camel-quarkus-3] (CVE-2026-97791) cxf-core: Apache CXF: Denial of Service via large multipart attachment headers [rhboac-camel-quarkus-3] (CVE-2026-107937) cxf-core: Apache CXF: Denial of Service via unrestricted XML parsing [rhboac-camel-quarkus-3] (CVE-2026-108039) cxf-core: Apache CXF: Denial of Service via uncontrolled data decompression [rhboac-camel-quarkus-3] (CVE-2026-78384) snappy-java: snappy-java: Denial of Service due to buffer overflow in Snappy.compress [rhboac-camel-quarkus-3] (CVE-2026-93452) snappy-java: snappy-java: Denial of Service via out-of-bounds write [rhboac-camel-quarkus-3] (CVE-2026-90559)