Red Hat Security Advisory: Red Hat Build of Apache Camel for Quarkus 2.13.3 security update (RHBQ 2.13.9.Final)
Affects Red HatSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 26 Oct 2026, 16:15 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Red Hat Product Security Red Hat | Affected
| Fixed in– |
AI-suggested
A security update is available that upgrades Red Hat Build of Apache Camel for Quarkus from 2.13.3 to 2.13.9.Final, which addresses the listed vulnerabilities. Users should apply this update promptly to mitigate the risks. No additional mitigation steps are indicated by the vendor advisory.
Description
Red Hat has released a security update for its Build of Apache Camel for Quarkus 2.13.3, upgrading to version 2.13.9.Final. This update addresses multiple security issues including memory exhaustion and denial of service vulnerabilities in various components such as JSON-java, Apache Avro Java SDK, Apache Mina SSHD, Netty, and Snappy-java. The update is rated as having an important impact by Red Hat Product Security. No CVSS scores are provided for these vulnerabilities. No known exploits in the wild have been reported at this time.
References
- access.redhat.com/errata/RHSA-2023:7705 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/cve/CVE-2023-5072 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2215445 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2216888 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2240036 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2242521 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2246417 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7705.json (opens in a new tab)