Search: CVE-2024-29857

Red Hat has released an update for Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 (RHBQ 3.8.5.GA) addressing multiple moderate severity vulnerabilities in the Bouncy Castle cryptographic library. These include a denial of service via crafted EC certificate parameters (CVE-2024-29857), an infinite loop in ED25519 signature verification (CVE-2024-30172), and a timing attack variant of Bleichenbacher's attack (CVE-2024-30171). The update improves security and stability. Users are advised to back up their installations before applying the update.