AMQ Broker is a high-performance messaging implementation based on ActiveMQ Artemis. It uses an asynchronous journal for fast message persistence, and supports multiple languages, protocols, and platforms.

This release of Red Hat AMQ Broker 7.14.1 includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.

Security Fix(es):

* (CVE-2025-14813) bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly
* (CVE-2026-0636) bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java
* (CVE-2026-10050) jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision
* (CVE-2026-12143) form-data: form-data: Form field override via CRLF injection
* (CVE-2026-12151) undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
* (CVE-2026-13149) brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
* (CVE-2026-13676) fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization
* (CVE-2026-40983) micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests
* (CVE-2026-40984) micrometer-core: Micrometer: Denial of Service via specially crafted HTTP requests
* (CVE-2026-42198) postgresql: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication
* (CVE-2026-42264) axios: Axios: Prototype pollution allows information disclosure and request manipulation
* (CVE-2026-42338) ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
* (CVE-2026-42578) netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation
* (CVE-2026-42581) netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers
* (CVE-2026-42583) netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder
* (CVE-2026-42584) netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion
* (CVE-2026-42587) netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression
* (CVE-2026-42587) netty-codec-http: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression
* (CVE-2026-42588) activemq-broker: Apache ActiveMQ: Arbitrary code execution via improper input validation in Jolokia JMX-HTTP bridge
* (CVE-2026-44248) netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header
* (CVE-2026-44249) netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation
* (CVE-2026-44486) axios: Axios: Information disclosure of proxy credentials via HTTP redirects
* (CVE-2026-44487) axios: Axios: Information disclosure of proxy credentials via redirect flows
* (CVE-2026-44488) axios: Axios: Denial of Service due to unenforced request and response size limits
* (CVE-2026-44492) axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization
* (CVE-2026-44494) axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution
* (CVE-2026-44496) axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name
* (CVE-2026-44893) netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message
* (CVE-2026-45205) commons-configuration2: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
* (CVE-2026-45416) netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake
* (CVE-2026-45736) ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`
* (CVE-2026-48043) netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak
* (CVE-2026-48059) netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers
* (CVE-2026-48779) ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments
* (CVE-2026-49362) artemis-server: artemis core protocol permits unauthed queue creation
* (CVE-2026-49364) artemis-server: artemis cluster password leak via jgroups spoof
* (CVE-2026-49432) artemis-stomp-protocol: Apache ActiveMQ: Denial of Service via improper input validation in STOMP connector
* (CVE-2026-49978) dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
* (CVE-2026-50010) netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass
* (CVE-2026-50734) activemq-client: Apache ActiveMQ: Denial of Service via crafted WireFormatInfo frame
* (CVE-2026-53916) artemis-stomp-protocol: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec
* (CVE-2026-54512) jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
* (CVE-2026

Red Hat Security Advisory: Red Hat AMQ Broker 7.14.1 release and security update

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.25 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.24, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.25 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

* openjdk-orb: unauthed class loading via IIOP in EAP [eap-7.4.z] (CVE-2026-15560)

* undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow [eap-7.4.z] (CVE-2026-15561)

* undertow-websockets-jsr: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method [eap-7.4.z] (CVE-2026-15565)

* jboss-eap-7/eap74-els-openjdk8-openshift-rhel8: Jackson-databind: Denial of Service via deeply nested JSON processing [eap-7.4.z] (CVE-2026-50193) 

* jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass [eap-7.4.z] (CVE-2026-54512)

* netty-codec-redis: Netty: Denial of Service via malicious Redis array header (CVE-2026-50011)

* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)

* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays (CVE-2026-44250)

* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads (CVE-2026-44890)

* netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments (CVE-2026-46340)

* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)

* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)

* netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator (CVE-2026-48006)

* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)

* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)

* netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)

* netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)

* netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing (CVE-2026-42585)

* netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)

* netty-codec-http: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)

* netty-codec-http: Netty: HTTP request smuggling via URI manipulation and CRLF injection (CVE-2026-41417)

* netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578)

* netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers (CVE-2026-42581)

* netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion (CVE-2026-42584)

* netty-codec-dns: Netty: High integrity impact due to improper DNS domain name constraint enforcement (CVE-2026-42579)

* picketlink-federation: auth bypass in Picketlink SAML unsolicited-response (CVE-2026-10579)

* bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk15on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk15: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk12: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcpg-jdk18on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)

* bcpg-jdk15on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)

* bcpkix-jdk18on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcpkix-jdk15on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk12: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15: private key leakage via non-constant time comparisons (CVE-2026-5598)

* bcprov-jdk12: private key leakage via non-constant time comparisons (CVE-2026-5598)

* artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and ex

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security update

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.25 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.24, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.25 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

* wildfly-iiop-openjdk: Wildfly: Pre-auth denial of service on the IIOP listener [eap-7.4.z] (CVE-2026-15567)

* jboss-eap-7/eap74-els-openjdk8-openshift-rhel8: Jackson-databind: Denial of Service via deeply nested JSON processing [eap-7.4.z] (CVE-2026-50193) 

* jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass [eap-7.4.z] (CVE-2026-54512)

* artemis-core-client: artemis messaging handlers in Red Hat EAP permit deserialization by default [eap-7.4.z] (CVE-2026-86404)

* undertow-websockets-jsr: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method [eap-7.4.z] (CVE-2026-15565)

* netty-codec-redis: Netty: Denial of Service via malicious Redis array header (CVE-2026-50011)

* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)

* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays (CVE-2026-44250)

* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads (CVE-2026-44890)

* netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments (CVE-2026-46340)

* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)

* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)

* netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator (CVE-2026-48006)

* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)

* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)

* netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)

* netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)

* netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing (CVE-2026-42585)

* netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)

* netty-codec-http: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)

* netty-codec-http: Netty: HTTP request smuggling via URI manipulation and CRLF injection (CVE-2026-41417)

* netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578)

* netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers (CVE-2026-42581)

* netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion (CVE-2026-42584)

* netty-codec-dns: Netty: High integrity impact due to improper DNS domain name constraint enforcement (CVE-2026-42579)

* picketlink-federation: auth bypass in Picketlink SAML unsolicited-response (CVE-2026-10579)

* bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk15on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk15: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk12: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcpg-jdk18on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)

* bcpg-jdk15on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)

* bcpkix-jdk18on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcpkix-jdk15on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk12: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15: private key leakage via non-constant time comparisons (CVE-2026-5598)

* bcprov-jdk12: private key leakage via non-constant time comparisons (CVE-2026-5598)

* artemis-server: Apache Artemis, 

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.25 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.24, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.25 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

* artemis-core-client: artemis messaging handlers in Red Hat EAP permit deserialization by default [eap-7.4.z] (CVE-2026-86404)

* undertow-websockets-jsr: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method [eap-7.4.z] (CVE-2026-15565)

* wildfly-iiop-openjdk: Wildfly: Pre-auth denial of service on the IIOP listener [eap-7.4.z] (CVE-2026-15567)

* jboss-eap-7/eap74-els-openjdk8-openshift-rhel8: Jackson-databind: Denial of Service via deeply nested JSON processing [eap-7.4.z] (CVE-2026-50193) 

* jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass [eap-7.4.z] (CVE-2026-54512)

* netty-codec-redis: Netty: Denial of Service via malicious Redis array header (CVE-2026-50011)

* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)

* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays (CVE-2026-44250)

* netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads (CVE-2026-44890)

* netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments (CVE-2026-46340)

* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)

* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)

* netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator (CVE-2026-48006)

* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)

* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)

* netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)

* netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)

* netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing (CVE-2026-42585)

* netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)

* netty-codec-http: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)

* netty-codec-http: Netty: HTTP request smuggling via URI manipulation and CRLF injection (CVE-2026-41417)

* netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation (CVE-2026-42578)

* netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers (CVE-2026-42581)

* netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion (CVE-2026-42584)

* netty-codec-dns: Netty: High integrity impact due to improper DNS domain name constraint enforcement (CVE-2026-42579)

* picketlink-federation: auth bypass in Picketlink SAML unsolicited-response (CVE-2026-10579)

* bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk15on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk15: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk12: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcpg-jdk18on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)

* bcpg-jdk15on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)

* bcpkix-jdk18on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcpkix-jdk15on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk12: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15: private key leakage via non-constant time comparisons (CVE-2026-5598)

* bcprov-jdk12: private key leakage via non-constant time comparisons (CVE-2026-5598)

* artemis-server: Apache Artemis, 

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 security pdate

Release of RHOAI 2.25.7 provides these changes:

Red Hat Security Advisory: RHOAI 2.25.7 - Red Hat OpenShift AI

Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.
The 3.28 release is based on Eclipse Che 7.117 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.
Users still using the v1 standard should migrate as soon as possible.
https://devfile.io/docs/2.2.0/migrating-to-devfile-v2
Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.
https://access.redhat.com/support/policy/updates/openshift#crw

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.28.0 Release.

Red Hat build of Apache Camel 4.18.1 for Spring Boot patch release and security update is now available.

The purpose of this text-only errata is to inform you about the security issues fixed.

Security Fix(es):

* artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication (CVE-2026-27446)

* spring-boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path (CVE-2026-22731)
   
* plexus-utils: Plexus-utils: Directory Traversal in extractFile method (CVE-2025-67030)

* netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values (CVE-2026-33870)

* netty-codec-http: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood (CVE-2026-33871)

* netty-codec-http2: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood (CVE-2026-33871)

* jetty-ee10-annotations: early return from the JASPIAuthenticator class without clearing ThreadLocal variables (CVE-2026-5795)

* jetty-ee10-apache-jsp: early return from the JASPIAuthenticator class without clearing ThreadLocal variables (CVE-2026-5795)

* jetty-ee10-plus: early return from the JASPIAuthenticator class without clearing ThreadLocal variables (CVE-2026-5795)

* jetty-ee10-servlet: early return from the JASPIAuthenticator class without clearing ThreadLocal variables (CVE-2026-5795)

* jetty-ee10-servlets: early return from the JASPIAuthenticator class without clearing ThreadLocal variables (CVE-2026-5795)

* jetty-ee10-webapp: early return from the JASPIAuthenticator class without clearing ThreadLocal variables (CVE-2026-5795)

* kafka-clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management (CVE-2026-35554)

* camel-infinispan: camel-infinispan: Remote Code Execution via Unsafe Deserialization (CVE-2026-6857)

* bcprov-debug-jdk15on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk15on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-jdk18on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcprov-lts8on: GOSTCTR implementation unable to process more than 255 blocks correctly (CVE-2025-14813)

* bcpkix-jdk15on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcpkix-jdk18on: PKIX draft CompositeVerifier accepts empty signature sequence as valid (CVE-2026-5588)

* bcpg-jdk18on: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion (CVE-2026-3505)

* bcprov-debug-jdk15on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk15on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-jdk18on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* bcprov-lts8on: LDAP injection vulnerability in LDAPStoreHelper.java (CVE-2026-0636)

* spring-boot: Spring Boot: Weak pseudo-random number generation can lead to information disclosure. (CVE-2026-40975)

* camel-mail: Camel-Mail: Altered application behavior via header injection (CVE-2026-33454)

* camel-jms: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection (CVE-2026-40453)

* camel-google-pubsub: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection (CVE-2026-40453)

* camel-http: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection (CVE-2026-40453)

* camel-http-base: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection (CVE-2026-40453)

* camel-http-common: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection (CVE-2026-40453)

* camel-http-starter: Apache Camel: Remote Code Execution and Arbitrary File Write via case-variant header injection (CVE-2026-40453)

* camel-jms: Apache Camel: Remote Code Execution via deserialization of JMS ObjectMessage (CVE-2026-40860)

* camel-amqp: Apache Camel: Remote Code Execution via deserialization of JMS ObjectMessage (CVE-2026-40860)

* camel-http-base: Apache Camel: Information disclosure and authentication bypass in embedded HTTP/management servers (CVE-2026-40022)

* camel-http-common: Apache Camel: Information disclosure and authentication bypass in embedded HTTP/management servers (CVE-2026-40022)

* camel-http: Apache Camel: Information disclosure and authentication bypass in embedded HTTP/management servers (CVE-2026-40022)

* camel-http-starter: Apache Camel: Information disclosure and authentication bypass in embedded HTTP/management servers (CVE-2026-40022)

* camel-infinispan-common: Apache Camel camel-infinispan: Arbitrary code execution via deserialization of untrusted data (CVE-2026-40858)

* camel-infinispan-embedded: Apache Camel camel-infinispan: Arbitrary code exe

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.1 for Spring Boot release.

bcprov

bcprov-jdk15on

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules).

 This vulnerability is associated with program files G3413CTRBlockCipher.



This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.

Search: CVE-2025-14813