Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 update is now available (RHBQ 3.15.2.GA)
Affects Red HatSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 26 Oct 2026, 16:15 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Red Hat Product Security Red Hat | Affected
| Fixed in– |
AI-suggested
An update (RHBQ 3.15.2.GA) for Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 is available that addresses this vulnerability. Users should apply this update to mitigate the risk. No additional mitigation or temporary fixes are indicated in the advisory.
Description
Red Hat has released an update for the Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 (RHBQ 3.15.2.GA) addressing a medium severity security issue. The update mitigates CVE-2024-31141, which involves a privilege escalation vulnerability in org.apache.kafka/kafka-clients that could allow unauthorized filesystem read access via the automatic ConfigProvider. This advisory informs users about the availability of this update to improve security and stability.
References
- access.redhat.com/errata/RHSA-2024:10861 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/cve/CVE-2024-31141 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2327264 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10861.json (opens in a new tab)