This is an automated email from the ASF dual-hosted git repository. oscerd pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/camel-website.git
commit 55189d4fa0559da255ffd15c8cd9de74db9686d9 Author: Andrea Cosentino <[email protected]> AuthorDate: Thu Oct 15 17:37:36 2026 +0200 Set the published date of the new advisories to 2026-10-15 The date field is what each advisory page shows as "Published", and it orders the security list. The 38 advisories in this batch still carried the days they were drafted, from 2026-08-24 to 2026-10-14, although none of them had been disclosed yet, so they now carry the publication day. The date is part of the signed text, so every .txt.asc is re-signed. Co-Authored-By: Claude Opus 5.5 <[email protected]> Signed-off-by: Andrea Cosentino <[email protected]> --- content/security/CVE-2026-78162.md | 2 +- content/security/CVE-2026-78162.txt.asc | 18 +++++++++--------- content/security/CVE-2026-78163.md | 2 +- content/security/CVE-2026-78163.txt.asc | 18 +++++++++--------- content/security/CVE-2026-78164.md | 2 +- content/security/CVE-2026-78164.txt.asc | 18 +++++++++--------- content/security/CVE-2026-78165.md | 2 +- content/security/CVE-2026-78165.txt.asc | 18 +++++++++--------- content/security/CVE-2026-79983.md | 2 +- content/security/CVE-2026-79983.txt.asc | 18 +++++++++--------- content/security/CVE-2026-79984.md | 2 +- content/security/CVE-2026-79984.txt.asc | 18 +++++++++--------- content/security/CVE-2026-79985.md | 2 +- content/security/CVE-2026-79985.txt.asc | 18 +++++++++--------- content/security/CVE-2026-79986.md | 2 +- content/security/CVE-2026-79986.txt.asc | 18 +++++++++--------- content/security/CVE-2026-80312.md | 2 +- content/security/CVE-2026-80312.txt.asc | 18 +++++++++--------- content/security/CVE-2026-80343.md | 2 +- content/security/CVE-2026-80343.txt.asc | 18 +++++++++--------- content/security/CVE-2026-80344.md | 2 +- content/security/CVE-2026-80344.txt.asc | 18 +++++++++--------- content/security/CVE-2026-83531.md | 2 +- content/security/CVE-2026-83531.txt.asc | 18 +++++++++--------- content/security/CVE-2026-84176.md | 2 +- content/security/CVE-2026-84176.txt.asc | 18 +++++++++--------- content/security/CVE-2026-84178.md | 2 +- content/security/CVE-2026-84178.txt.asc | 18 +++++++++--------- content/security/CVE-2026-84180.md | 2 +- content/security/CVE-2026-84180.txt.asc | 18 +++++++++--------- content/security/CVE-2026-84181.md | 2 +- content/security/CVE-2026-84181.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85243.md | 2 +- content/security/CVE-2026-85243.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85245.md | 2 +- content/security/CVE-2026-85245.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85246.md | 2 +- content/security/CVE-2026-85246.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85247.md | 2 +- content/security/CVE-2026-85247.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85248.md | 2 +- content/security/CVE-2026-85248.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85249.md | 2 +- content/security/CVE-2026-85249.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85250.md | 2 +- content/security/CVE-2026-85250.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85251.md | 2 +- content/security/CVE-2026-85251.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85254.md | 2 +- content/security/CVE-2026-85254.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85257.md | 2 +- content/security/CVE-2026-85257.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85260.md | 2 +- content/security/CVE-2026-85260.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85296.md | 2 +- content/security/CVE-2026-85296.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85300.md | 2 +- content/security/CVE-2026-85300.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85301.md | 2 +- content/security/CVE-2026-85301.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85312.md | 2 +- content/security/CVE-2026-85312.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85313.md | 2 +- content/security/CVE-2026-85313.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85314.md | 2 +- content/security/CVE-2026-85314.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85315.md | 2 +- content/security/CVE-2026-85315.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85316.md | 2 +- content/security/CVE-2026-85316.txt.asc | 18 +++++++++--------- content/security/CVE-2026-85317.md | 2 +- content/security/CVE-2026-85317.txt.asc | 18 +++++++++--------- content/security/CVE-2026-88901.md | 2 +- content/security/CVE-2026-88901.txt.asc | 18 +++++++++--------- content/security/CVE-2026-91858.md | 2 +- content/security/CVE-2026-91858.txt.asc | 18 +++++++++--------- 76 files changed, 380 insertions(+), 380 deletions(-) diff --git a/content/security/CVE-2026-78162.md b/content/security/CVE-2026-78162.md index 4292dbda..50c87344 100644 --- a/content/security/CVE-2026-78162.md +++ b/content/security/CVE-2026-78162.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-78162" -date: 2026-08-24T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78162.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-78162.txt.asc b/content/security/CVE-2026-78162.txt.asc index 2d7af6f7..cfa5788d 100644 --- a/content/security/CVE-2026-78162.txt.asc +++ b/content/security/CVE-2026-78162.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-78162" -date: 2026-08-24T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78162.html draft: false type: security-advisory @@ -26,12 +26,12 @@ This advisory is an incomplete-fix follow-on to CVE-2026-43865 (CAMEL-23414), wh Releases from 4.0.0 through the 4.14.x line are affected as well, since ReplicatedHazelcastAggregationRepository has carried the defect since it was introduced, but those release lines reached end of life before this issue was resolved and no fix will be issued for them. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrM1+EACgkQ406fOAL/ -QQCXnQf/eIzueh+vQqg3/KlfYQxQBdAQTQ0T9yutOlqfB720DCPesJ2y8mOjo0XL -CSbcjjf1dtEgqc7vPVkrLal2p68FPg/bL0fXQopiY/qMf9G7JZgaQKBjIPFHzk+C -EQDOh+0PBuaFYwSBIM9ggyPZ90kMcOq7HQq8wxbUI0w/X0jKyAc2ysR+KOd852ab -JQg/yUJQ+FX9dZFiEFfLix7CEHuIsMtUC2UoZ89/m6SuwjfcAQNzfJdki3OGR+yz -3yFuwhG/y8qUW2SJgIrwGP6m+W8+mpqxrdpRgtk5BovGRK5HtTPtEKiAnS+CUE1s -qIDau9TXZPktGcsFMiPjozSTvf4Jog== -=2NYs +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8x4ACgkQ406fOAL/ +QQC1lAgAmPu8mhiXrxb1ttRg4wkLsudDbqLsWpkl/fki713XE9oB7FrlEWgpai/n +fA02qi/wQ8G2DUv/ouza5zFq7DMwLmfKvSMPeqyeyh9s65y8M6gO9RYsf8x71ktR +l8TKVeFl01Pmsg8PI+/WMFw3bu9ZScXd181om1S37YmSpj+Orhp/lu/KdFOdfn8f +mIH32iGfjzezwPH/wTBn/0zw5WayKmGwSEWn3pe1ylLovxCkb7k6IHEtRYFlpKK7 +7A9cmMYYt3fJ3gqUhJdI2OPrtDi8DLFDm9gQTzqgGTkZHL6Ud2KASUGT5V7uZ0bM +q7nfzEMK33lsQjstooHSTYL02+RhKg== +=bSPC -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-78163.md b/content/security/CVE-2026-78163.md index 41604431..a48dfcc3 100644 --- a/content/security/CVE-2026-78163.md +++ b/content/security/CVE-2026-78163.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-78163" -date: 2026-09-07T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78163.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-78163.txt.asc b/content/security/CVE-2026-78163.txt.asc index 7d8f564d..2c0459d4 100644 --- a/content/security/CVE-2026-78163.txt.asc +++ b/content/security/CVE-2026-78163.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-78163" -date: 2026-09-07T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78163.html draft: false type: security-advisory @@ -28,12 +28,12 @@ The local file disclosure has been present since camel-docling was introduced in This advisory is distinct from CVE-2026-40047, which concerned insufficient validation of the CamelDoclingCustomArguments header in the same component and was fixed in 4.18.3 and 4.19.0. That fix was scoped to the custom-argument allowlist and did not touch the body-derived input path described here. Reaching this issue is also easier, because the Camel header namespace is filtered at consumer boundaries by the default HeaderFilterStrategy whereas the message body never is. It is classif [...] -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrNAQAACgkQ406fOAL/ -QQApBQgAkO5qHX0Tqk0KHvpkr5Wafjj/FLUFarsLr/y6MkSgqvsumJsfdtp3pUap -11lwN3vakVhUPy+HbfZ7xEWXs2t5qUvWrHQV4bc+MA6u7BRT3s+GnCe4COBX3wdW -qeG0/qLyxvmreDN0AqCdsFZ6XdQTnT7W17raD4vCoR7LyZCUl1eIHOUJRPo5QBZO -OcbogUZEE+u+D02LgUcNomHXm5RDEbpImMkFVSeyci1Qu+tqZ/Vk7TgqYbXYx5hZ -RAr8HS77uZlwZ8KUhDSxuS/fZyTnr9DfWYSetmYxjRnzEnn+xXd2K5kzo75pNqfe -HpPBNfsKoaIDNlMX2oFr+eQOON9xXg== -=tLix +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yMACgkQ406fOAL/ +QQCpqgf/X/W4ZMqqI39215O52GfC900m6J+P9mUThqFqt3iW3Y9g5Z9gpNsIryQ5 +KxYYSxUrGO0xZdXm9vtdFzQZt2UbUATIdcw4sZaU78DGpeGzv9DKr5rQON2Z+Skx +7eb6lVH7Lr3RwibeTXrkJPx3TCUtQqAMZYgiF6c/UrjBwtig3dJ7NcVvYQ3Zhtvh +Y/OKKRrbNYjZ1Zmobj4Fg3MKGxy3jkxMXetfPettK1WR9xdmiw1sVMfaaD7E5y3H +TyQrmfJFTsP+pKKlwBHVf3+b6vrz0NcoxZOiqbFuIeO9jfwLI5BAzmOat+jOquMW +DfwWn9U6fTEp8sIaHPunXoSKplj1xA== +=svpM -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-78164.md b/content/security/CVE-2026-78164.md index 94cc0bad..f5a86476 100644 --- a/content/security/CVE-2026-78164.md +++ b/content/security/CVE-2026-78164.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-78164" -date: 2026-09-07T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78164.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-78164.txt.asc b/content/security/CVE-2026-78164.txt.asc index 5f0b4087..578ccf4d 100644 --- a/content/security/CVE-2026-78164.txt.asc +++ b/content/security/CVE-2026-78164.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-78164" -date: 2026-09-07T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78164.html draft: false type: security-advisory @@ -30,12 +30,12 @@ The issue is classified as CWE-1336 (Improper Neutralization of Special Elements Releases before 4.15.0 are affected as well, since the behaviour dates back to the camel-http4 and camel-netty4 components, but those release lines reached end of life before this issue was resolved and no fix will be issued for them. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrM19sACgkQ406fOAL/ -QQDugwgAtkZVanCBsjE+fLgdM8cOJq6Egu2ANpHc6O7KHbkC7uZjQ2IyBx0gnceE -BqIx2bQEef5YHgNbua7T6n67YfDjIlZltY1fK5oNXN2Vvt4DEe2duiGeo6iEsrXY -EHskoMQj7UqBi1GMLjmhTrThA/rJKIrWXzi/5DXXSN5X/6Nh3SjUVeKJ157CpQzD -iOUbwf/bMLD9OywcpVTA23QAfF0Q6ZRVAtvJCK9mzVk4XF0VMJDZ+/1t5qkedFha -xpuJpsE/aVMRcakCHhc+A5bGs8d9a/mEsfnWOlNuDqgbD77yy2d6Yk0iYisMkQky -GAg2z8zeVRJ6rftggKd5nEXfrHXZbA== -=otpx +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yMACgkQ406fOAL/ +QQCN9wf9EnPRwCQeLAW5fa7q62N3/ERT2FlZABwSJfNRKgzu5Rmm4gzKNrZd88Um +41fL/eyt7K1xHvcYWYA+rIOiQbsg3f91HoPsjAouCEM/qN5oKHzCI/yk7fz/o+J0 +/EE9x9Y8RSXu9Opjd+f8rdhz7mk6o2z6PhuveLu83caft6gEN7TFkrLtU/BDaYOy +b8KmSZZdKyO79ipnMGAbwuu4Y1VVqSfDKl//asyroAaDjLtbMUdsBmT5AFy11UdW +oub+mBsC9y5DijZ+HJT5qJ6r6RxsJfBLmxoVtWgt3t3ysb+IKyMhUqszXOFi8xlS +cmkELOngg4fSXr4wWVkcvw7bsOvdpw== +=sAos -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-78165.md b/content/security/CVE-2026-78165.md index 092e331f..098c10c3 100644 --- a/content/security/CVE-2026-78165.md +++ b/content/security/CVE-2026-78165.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-78165" -date: 2026-09-07T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78165.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-78165.txt.asc b/content/security/CVE-2026-78165.txt.asc index 12d99173..d404d61a 100644 --- a/content/security/CVE-2026-78165.txt.asc +++ b/content/security/CVE-2026-78165.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-78165" -date: 2026-09-07T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-78165.html draft: false type: security-advisory @@ -26,12 +26,12 @@ A new deserializationFilter endpoint option, labelled advanced and security, now This is a change of default behaviour for routes that exchange classes outside the allow-list, which must widen it through the new option; the change is documented in the upgrade guides for each affected release line. The issue is classified as CWE-502 (Deserialization of Untrusted Data) and belongs to the same family as the unfiltered Java deserialization advisories published previously for other Camel components. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqemI8ACgkQ406fOAL/ -QQCTYQgApRXx1DYaQxDgYkK6HEpEsc+OHURPvR+WMhggkLuIy/MP7vnoWuvojMIX -KUsqpUIvlNx84lTJMhiiQefQML7rcBRDskHoxSsFyd11X9f/i+WVQWuFJUgUA6mB -zbJbQDYftbrWYM3ajaToqKDti0iu/5uapM1ywzit5TtaGbczegSBYPnGoI0/cgk2 -jo1kW8tRHHpc95pLO81jM3nlTSCDzoLK4PzMSxck3hijh97f+RBPEIIPQTyrR58z -QuSMgtNYlamELjU9BzIqXMJPC7Dx2uUqVVhF3cSk8kfVCPRzB7Ia36vyELl+Z+3K -zcgaXJrs5DDnWR4ijaLGieqSR1Imzg== -=UqHS +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yQACgkQ406fOAL/ +QQCUiwf/c9hEjNioqiVPECkX2D2n4cussI0ktWDURLYcnzLjFKryW24Sza1pjfxG +/Tyj9+l94dZwJN2bANx2w3J8S2piEbHG/lMw2t9E9tR1Q8CFLq71JRyhc3aEaUAn +LU0UZusVRThBqrYEnPewhjLDRrjmV2STkLdpUjdS21Wdu87VI11R0+N5LUuxstnz +9Sr+q/VFu5GnALx7/JsLmaB/USpJ7oH/ja5dpMKG7V2hldk9WGHmkQEja5G6D7Dq +B1mn37wzCBECfWVn0Uc2Uj49GOy/KAjPZm14cQlmNKJQO9tHFOmnTdbUXAh+LDvX +JWmNR0+CTxsaj5YCaTBdIC2uX8xS0A== +=V+df -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-79983.md b/content/security/CVE-2026-79983.md index d041470a..db245a67 100644 --- a/content/security/CVE-2026-79983.md +++ b/content/security/CVE-2026-79983.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-79983" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79983.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-79983.txt.asc b/content/security/CVE-2026-79983.txt.asc index f4b0a5c5..cd213a87 100644 --- a/content/security/CVE-2026-79983.txt.asc +++ b/content/security/CVE-2026-79983.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-79983" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79983.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25730 (commit The issue is classified as CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). The affected range starts at 4.0.0 because the helper that performs the concatenation predates the 4.x series; this artifact provides the ftp, ftps and sftp schemes and all three are affected. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqtBSwACgkQ406fOAL/ -QQD+0wgAgP/PS9JZWBfeExMAh2HWgDjQ7TtOetgS0HIk7sUqYF0ZUBJNliI7CzuT -Xm5/ZIJMBX160jKqL1x3DovUtByhWdrIFTtbS/zmq5FrUjWE9DuMafjsssx4H7U3 -RI4eG106o4BETTe9P9t4jBBM+ttgn31VbP3eg3ZozTB8VfEypg6Nz/46UJ08VYj5 -AcL9m7M/Id1F5pZV6JDo7zrH8sre9MFTUgLjxQYL2L3nnI3+vp1Ot9JaCVGiZrxz -zVl0oBGK7D0lzR9j2aGFYxaG9VMtn8XlkgvtuHZs4QjmTvNY97+0mtpSITDJK4Jr -vaaqUDk2MMHJlGHglayEBYr7kILk6w== -=zWj0 +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yQACgkQ406fOAL/ +QQDhrgf/XLmW1gBfLLUVok37QlunExMfzYLSrmREtzvKFlGM0ynm2+FT11VrrHAp +Mb35E/9OjC7vik2dxe/+Ksi6kwDWrMHek9XRRjhkglI8gkdz5vmoZgNWFhC++rbF +A5faxpl/NWABr7/YaQihPI5yoGNHEN1WM2TtK3OfitlEREEbnFpnLW+o6Wk9JlGp +X3SP2ext2+wBvHsY+VX6akOPjyi4v3OENiF4JAVjqaj7DhELxX25U602xCISPsxY +E3dXIT7QRYu1oOvQKwruLVG3TS0zW422QJPlfCyHUrfh/j+lqVMdNdltPWDz+vIt +4qjloumwCUWnHMBs1F1qMuQIDEAicg== +=0oU5 -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-79984.md b/content/security/CVE-2026-79984.md index db39e720..34a2ffe6 100644 --- a/content/security/CVE-2026-79984.md +++ b/content/security/CVE-2026-79984.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-79984" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79984.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-79984.txt.asc b/content/security/CVE-2026-79984.txt.asc index 5cdf366a..d7890034 100644 --- a/content/security/CVE-2026-79984.txt.asc +++ b/content/security/CVE-2026-79984.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-79984" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79984.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25730 (commit The issue is classified as CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). The affected range starts at 4.18.0 because the camel-mina-sftp component was introduced in that release. Its consumer derives from the same RemoteFileConsumer base class as the ftp and sftp consumers and inherited the same unconstrained resolution. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 o [...] -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrNAQcACgkQ406fOAL/ -QQCtIwf/d0Iuk6fDkK7GgLCJvt2SCHrQpIzurVtWB4xFcXsXEqUHH5Hc7vlCmcqQ -/I3XBfuuzIU5uoxV/fEYVD6N41yR5P2VAiJc9cmIt0zWBkUpgJWY1d9oCNafWqUo -5MboWdwGRquPWJ2oDcBD+oK69NIPYzvCfWDjXvf1RqYuxBMLxf0InH47JnSYLHRK -GqYyvvX++vug4jvl4meVk8WCL9wjezKBv7A4m6TUSVn8NGrTbFH5iM2ARAPzcVRi -du/2pgBse0yqZEH18XoOIRwYqaLcoOp+L6QkFClGICARf4xVdzcVn5acnp/pJLID -GG/AYzTETYW41/fCcXBQCAzh6tJmOw== -=XSGZ +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yQACgkQ406fOAL/ +QQCxlgf+JKRwWlYJ55hOdlMAUbRhj1hKEMcRdVXc7Yakop8CNiXOrM51qcZY4iKw ++eavbC3RF03KsMfAwci5/sZeEEiZiYT1I/wg0vBkVug+DFWH4u+LHFHxRYwRyKHd +Z/liSjLoIbJQPfhFXhlCDdxL3B8Tdy3yRLQXfBAemsBsw7LepsVYWMqzEAS6lMhE +7tzFQw0egGdpj//7fHPt8DX/fzDuuwPKc10vlRMUeoJq0gdj4XaFCwYhNlcAliO0 +b5SzL9BkslUG9cmt+BbBV9tdbv+j0g6E5HcUj71Dd7AF/iu3tMyRSZDFCqKfOYYK +ajTdO2/EHaF8qt6o7smjPTkbFMa3iw== +=KRsI -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-79985.md b/content/security/CVE-2026-79985.md index e1b1f4cb..13374d21 100644 --- a/content/security/CVE-2026-79985.md +++ b/content/security/CVE-2026-79985.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-79985" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79985.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-79985.txt.asc b/content/security/CVE-2026-79985.txt.asc index 50b7e37c..1717bacf 100644 --- a/content/security/CVE-2026-79985.txt.asc +++ b/content/security/CVE-2026-79985.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-79985" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79985.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25730 (commit The issue is classified as CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). The affected range starts at 4.2.0 because the camel-smb component was introduced in that release. Its consumer walks the share listing on its own rather than through RemoteFileConsumer and skipped only the exact \".\" and \"..\" entries, so it received its own containment override. Reaching the issue requires a server that emits a listing name which is not a single path segm [...] -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqtBSwACgkQ406fOAL/ -QQBd4ggAk0OvkeoqlcphEKC72QM7Ifm0l/n+6FNRXpOqa5MG9P3fbwYEtGT+s8ax -OwU+RFcL52sU+Yx4kRj5N2WPEsrGHxi0S+bUjC7OM1wN/ujKBxD5lzPVPgx0WPjN -km0GuQAuXTVQ0yY59dySG12SVWOtLAhphTeVrcLdn0zOBzRN/jf9oclqs3jojYJG -F+B40ceysL2/CuyxgPaMTtSQzD/R5kwBGdeZu8delcj/PF9/zx21Mw/24zcoooEu -DvHCs6EUuZUTNaVphuhWsXa9MGzvRaF2jCRT89tZ5JFf3MJMyQhF8zNfVtvhSzsP -h+JjB4ybOAtmFEOA1WFZO5copgeZww== -=R+wx +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yQACgkQ406fOAL/ +QQBrKgf/X2KKTxUgW+/ZBDfN6/GDd8KfOwCLYZBTf/nbmRNcCynuxcsY6G4vuuJ0 +1KWoKq/40sqnU6uiwFZgEC31x4eyHCLN0j9fwknua+P0vhCTu8531/rEBoX/nSJR +iBtY54eI0sXRilj2vRntMrTNvrxmBKWEJp2KJsf0nLj8fwwFcEn/f+iruTXZMLwg ++F9jwHSjDOVOc4XFWTWKCw0oUw8vS4WdXiofXwL7QbWKV8shIeukAlUnMs0GkzoE +Wx3/TyRGPRd4836QP5W3ZzX9C9udeXqXGZYJoVq+ikYIrCdaulEMrsJMUvygFtyd +MkvIlo2McvEeQzGyINtDHyq11wcyOg== +=cl7E -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-79986.md b/content/security/CVE-2026-79986.md index 337e34fb..3bbc8c9a 100644 --- a/content/security/CVE-2026-79986.md +++ b/content/security/CVE-2026-79986.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-79986" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79986.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-79986.txt.asc b/content/security/CVE-2026-79986.txt.asc index 46ab8afd..2d95c182 100644 --- a/content/security/CVE-2026-79986.txt.asc +++ b/content/security/CVE-2026-79986.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-79986" -date: 2026-09-18T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-79986.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25730 (commit The issue is classified as CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'). The affected range starts at 4.0.0, the first release carrying the component. Its consumer derives from the same RemoteFileConsumer base class and composed the remote path through a plain concatenation helper. Reaching the issue requires a listing name that is not a single path segment, which the Azure Files REST service does not normally return, so this component was correct [...] -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqtBSwACgkQ406fOAL/ -QQC98ggAlA8Tyu6+J5Bhe3hBxAo+MdXBlAlTctpZ07yrStRnoEu9B3d4LVdccCAK -QhvXAZR8rtSXUBlAOfG93qbg5oAFobGf7RDPfCJ/GPNCPOanqwoW9gZf/QtKfmCJ -+rPP/GoMm9l8aTR6foyfPSMroTwkDvH+mp62V9XZJBaYmxOMBfdn/NsvhoAvs5kq -MR2kq6hywdi4gkSDCU4OttBQKIwgyHKxTT9lYyVAPQP+FPkN1+u5THntaqsQo3Ff -OAQ5L/Wv7bPlbZWkJoGZF+R1Wu9xLh0KwkhNYxxVSrwdcLUZPCQLIpNbeS2ncRyh -qLSjBRE/sfq7gJR+80ZawV3su/YBCA== -=q0Dv +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yQACgkQ406fOAL/ +QQA05QgAlrx3mSz9xtiKYAY+/okdFo8eK5cGh7qqJs9hoMXgwwLHkMf/yqV7u1YI +9RQTNu6ifGgqn/f8QlpNT3dhqt60nXKqSaV/S065OxOkH2e5HTm9ezbIU3R/aLqk +kb+gIxfczHeurTAVUkYfqFAvSc8iUL4rxyuK2TH8+VmFhCe4+HxwpxFPBDTYOyx9 +IjUOt48/rLzktgWCnu8VWJlbf7Gr8USLuPclv3Pg43WTNXuksyH/P58N8uuZ2iPz +JDxXKtDiqWQquiCW0y62HATtZnwjJbRa9v8YXNJHi4eK5AVsj9+GKlLxx+9NSUiL +W8eLacepGd85OrOIrSTJpKL57POmHQ== +=H9ns -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-80312.md b/content/security/CVE-2026-80312.md index eb805c61..b4aa4611 100644 --- a/content/security/CVE-2026-80312.md +++ b/content/security/CVE-2026-80312.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-80312" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-80312.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-80312.txt.asc b/content/security/CVE-2026-80312.txt.asc index 1b86c099..58901b59 100644 --- a/content/security/CVE-2026-80312.txt.asc +++ b/content/security/CVE-2026-80312.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-80312" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-80312.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25567 (commit The issue is classified as CWE-287 Improper Authentication. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrQACgkQ406fOAL/ -QQDVDAf+LHyIJenl+BuhdBrWxjx4FbmE7B7qfLjDNVuxcIFD+xOZuhFi/P/3aYcz -wgl7F+PoWWqu0Q3c4fhWfjmQoArPvUoN9eq8ZgR0DcUnpBPrkUSGguDN1sbKrPzL -E3cGDZUMfqszTFZ7eYCt7nTqn9TD0M7D5CUTFjGUELzzp5utXrkEWT3D1g/8dfCw -mj2ubaCTG8u1s26HQafRhMI+qmcaoVKrqsshlIPPGHRhElN785mcADfJk2pPp/rg -8Ssi17Zhq+b2rP4sTaVI2akRIgtMTn4xqKtm3BWY+6GMBvoPT7ddzrVJaYPHIpiF -vQQc626MpX/1I8rPAuIbnTq/w+k8dQ== -=MXgb +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yQACgkQ406fOAL/ +QQA7KAf9FbAEcEwIPc6yFy06xjAeqYqMFdyDLPy2Twuwc/p0X80uQy31RlNqdPe/ +MMN1Dqb+X5Uc+qctIY479jMi2t1pD9j4qMOaH3KCvusISOlQHGHkDtIAUbXPZZNa +Y6Tk+PFv3JzGVkSbZnLSRhvkEQIuZcWzW+Mv1nV5JmnqXTxWkPWBTV32w2m3L8rj +ATCAmXHvCgCjT8vkBTKhKlXoMxR3J3kjSWIwaiSeA4B3ezcDwBqO5TbiIZ9CkVPN +sknnonGqF/q9qA3tn5gyew+ZtcihxCBjT+piKbFloOxLW4c3gRaCVTG6vN4buhWq +5V9BN7QKpQu2bBvmqURBogIPNChhZA== +=da7P -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-80343.md b/content/security/CVE-2026-80343.md index dbd7a919..4740c86d 100644 --- a/content/security/CVE-2026-80343.md +++ b/content/security/CVE-2026-80343.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-80343" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-80343.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-80343.txt.asc b/content/security/CVE-2026-80343.txt.asc index 9cd52089..d136a03a 100644 --- a/content/security/CVE-2026-80343.txt.asc +++ b/content/security/CVE-2026-80343.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-80343" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-80343.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25578 (commit The issue is classified as CWE-178 Improper Handling of Case Sensitivity. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrQACgkQ406fOAL/ -QQDv/wf/ZO9jiSzWcy8VKAc6zkYs2OZANZFaSloosplcP/iMBHW3WGb4Vj020jnA -rxuqOv39R9nQIe1gn3z5WARSJNOIp4EsPhjveKPMQOo24LLiw6gwLI7zAfAziLJQ -1ii+O6FL5pMaXyFkIUUHE9eJC7XxdaZQEDm+7G/few67ipTBPGYkAG0z4I39smDN -HE6WZH+7U2YbXrF3fV+BG1JUAEMYgkE16eI6AKpX8EeGFkHYvw4fOeZdB7xVXT2N -FFuiZBqGUwlp++vl0WsRjFTUzYKa/wgBfDFbbkCKoJSZfjmkoGTFbe4uA8DiYfPE -DhPVPH4AuGDx0E5kBqdpwJ9M1+Cifg== -=MZr1 +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yQACgkQ406fOAL/ +QQBA6Af/fSgyfGonzUGLfqxkWsHZxaz4ikXBcTRiyxoyOAqcJeXM6XSPLVe18UMi +OdxMX8u80QUO8giObcxk9ZXZ/vXN+1amCpA6S31JLKsYJmMRw6jzysHAQS8gzRVf +38aDnstjOo++lIQFzk9RiWS/X0C1FrwcrtfUrEBg/wjG+ZC5yAqHUzZJWZxZSsJP +d5dsr5rwjfl1Vhgm6NAmWI34bugdlRfFMaAthRiP5RWfskJqgb3ZTdc18iBt3sn0 +qv3wpwL6vNOnWC4uh4+qz+Z1N2zEIw691saz+KoYRhvHA3zhG1t9KVyYLuu2RQ0A ++KyP3a5X95jlsERgqsNy6cncazgOMg== +=cvKM -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-80344.md b/content/security/CVE-2026-80344.md index a6978d9b..b1fee191 100644 --- a/content/security/CVE-2026-80344.md +++ b/content/security/CVE-2026-80344.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-80344" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-80344.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-80344.txt.asc b/content/security/CVE-2026-80344.txt.asc index 0f40523a..3b8c8fbb 100644 --- a/content/security/CVE-2026-80344.txt.asc +++ b/content/security/CVE-2026-80344.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-80344" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-80344.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25637 (commit The issue is classified as CWE-918 Server-Side Request Forgery (SSRF). The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrQACgkQ406fOAL/ -QQBuDQf/RASTmy7khWoz0M/3QFTcas76FV/38xvwVnR7wEPswF8pXmS7khJ4MUPh -oY1T93YR1kJUkCfhhocZfN5JoEjUye4VeSSQzPdYQo8a4J0qbDef7EOfyuUo5/pK -AagJE/5mTz7NvM2Q0WQomi4TAfmc3xbULjDEOJZM2SKu7tNrNAcOfYMGf9GC3ezE -hkdkbcyqgw64Wa2umtqOFGSc+imU9rDxcirZHYepBs4WOxqApwRheJSRZegZW0Y+ -hWzU5YB9kxiXwLxltB+8gd5ppPTvlkETpWXhURE1376aL5dtALPxNkCOnjRUGCpZ -uOCX82XUnB3VrG4GehJo+hnbk/r1VQ== -=E8HC +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yUACgkQ406fOAL/ +QQDouwf+JrQAqGoxVyYsyCaAy5TEltr64yN4FjHvRJ2Xzj3RMIh6pQXgKs3yU6MB +CMdxYkaPmU0rvDlsEj5LmRnR4VgEDbtGXMmhCwmNFvx1zzGfeikvDYDr0CaqZQ37 +Qy6IhCfGfIyOzl7TEyze7xjxV8GAA7HzgFhOgR5hKk580prXiGXn74kVMPmpUxFu +NPwnxDHtXWRNKg3phETjLrlmTR3r8kfvcnsI7quXz25UeaRuXDM9jBwedncqk5TX +FuwQyG4kJ1Ikl/vjijhYXh8g7y7a5jjQX96UYH8q9NclfvcBLbmK4C+U5c4pedwP +wzk40SNgMLjFNLOkYT4fup0sNBuWsg== +=K1Tw -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-83531.md b/content/security/CVE-2026-83531.md index 17f58f4a..a3e319bc 100644 --- a/content/security/CVE-2026-83531.md +++ b/content/security/CVE-2026-83531.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-83531" -date: 2026-10-12T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-83531.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-83531.txt.asc b/content/security/CVE-2026-83531.txt.asc index 70560f56..449e5276 100644 --- a/content/security/CVE-2026-83531.txt.asc +++ b/content/security/CVE-2026-83531.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-83531" -date: 2026-10-12T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-83531.html draft: false type: security-advisory @@ -26,12 +26,12 @@ A new allowPredicateFromMessage option on the dynamic-router-control endpoint, d This is a change of default behaviour for applications whose control messages supply their own predicate expression: they must set allowPredicateFromMessage=true on the control endpoint, which should only be done when every sender of control messages is trusted. The change is documented in the upgrade guides for each affected release line. The issue is classified as CWE-94 (Improper Control of Generation of Code ('Code Injection')) and CWE-917 (Improper Neutralization of Special Elements [...] -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrM3FIACgkQ406fOAL/ -QQBgsgf7BXuywNlz6AZK5OY5/B5I/Pj6IzwlK6ae5dGw5yhd3/hEl6rfCd/x7fZb -IzlcOUEQ0Mmpt8+CJawfKbp0BfvBu3vCNs6uEvBSnboXxVxeKLd6Qkl5MjM6zaWz -XCCs0wt1NjMaUTeL8wdDeRknHREDv0zCvOPV1xhHHP8s7fSTh9W8t4fS1LrZ+2Xo -QCR6u8xBkLJR58wf7LOtKJ3lizcCpNIz4FI2E+0gennr3ifC/ILwyVZahSZd9sKY -OhY72ecddgxWuRVp1cp52NuJIQ9xukYwcrT6se5FmggH/VkmN1B6FUbKXPwhb+ii -1uE1jqd8aze22ZWGmWDYG20bd2TtAA== -=YUMY +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yUACgkQ406fOAL/ +QQAGgAgApFBMFSYr9oROYbc4S9twje08eeCRp3CASJpE0k3vmJHH4f5loFkNHQaM +RD65ON6L1N0wv57Lg68ygk+7QUZafOZ+Ufo5CzVfCAyPu6tg5pdHP5L5t/bRieZQ +Qnmc02sWoERfRjh4WqGJuy3O3Nmv4G8Fo85O5deqhYNELaYFKsnpKbnUZ4PXsCo7 +8vi1VRWqGCVQ65sDUlPqFz8aVPlqQVpAsvWwPJl9XGpLJdHtXzdpkQBbrL2ozpHm +rEOcbXN+cVlNDbZqEr5rtJ8Pdm8h1T8X8jAIscDjlUVojUXpi8ZcxWUKO6gKAYdg +/4bL/21/xD2O8xWSJjacV7/Pebjysg== +=DG4C -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-84176.md b/content/security/CVE-2026-84176.md index da22eb29..38041101 100644 --- a/content/security/CVE-2026-84176.md +++ b/content/security/CVE-2026-84176.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-84176" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84176.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-84176.txt.asc b/content/security/CVE-2026-84176.txt.asc index fd6778cd..73b2ba6d 100644 --- a/content/security/CVE-2026-84176.txt.asc +++ b/content/security/CVE-2026-84176.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-84176" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84176.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25820 (commit The issue is classified as CWE-942 Permissive Cross-domain Policy with Untrusted Domains. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQAlngf8CkwyW+UFZ3D7WRScR0xQoBpAeBVdngqIkTU58/aiGY5XfrN93ELTJkJz -aOATa06MmWPp/gB+IoPy/KOZzItHjmaPyDkubZ0XD4RPRUpxBorQKFfWl/nXGSge -kdLa9JS8HH1vzinYHnj5Elh+nl6AKBuaWydZv4zpMjVUe7pL+ZH4/nU51NKqaOpq -T3gUQtK+/pVpqz2ESElcqKlKWUDpEbCQ1CvdDkyBbt+6++6CzO+ZstsSE7K1Zezf -xZRF0MR/hu9GOAa83eFJ6IzKYed5bkOGnpUlYUMsjTIQ1KFW6Kr6pgECKSNZ/PRk -sL12F9glf/+2sNWMNd32cdWiF/r4DA== -=+kFA +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yUACgkQ406fOAL/ +QQA+TQgAoVjlFLHDrfG7/A4sJ0ECf0WlOolBcttpQ19OFcKnSfCTY8Fa0pRuihX6 +Uawk0ESa0gNdHh8HA+d1vdy8OS/H+kxU9+gOi861y07g36KHsgNG4HmEYDBsFAA4 +VtjOm/LpusS63l2RylZm8ZPKcGUI0ftlt4Ctd+aIy9oW8NBa39gitCp0ml1Bf1sU +3U+6Q9/YE3qlLEVtp6fGLtD+1W261auD4Lwp8CbfuiTrqtv4XVSvInrzK+TIpsvk +hxtDOS4rimmVVGTmPSrtAy51inB4CPMCOwtSONAaCsshS/WluNQKxaMK8byPvO0V +I1LTtzOzwpKTy+0kzAIseVbCGmNbLQ== +=VM5p -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-84178.md b/content/security/CVE-2026-84178.md index 03885a46..6ea7eec7 100644 --- a/content/security/CVE-2026-84178.md +++ b/content/security/CVE-2026-84178.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-84178" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84178.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-84178.txt.asc b/content/security/CVE-2026-84178.txt.asc index 238e2864..ca0d2761 100644 --- a/content/security/CVE-2026-84178.txt.asc +++ b/content/security/CVE-2026-84178.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-84178" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84178.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25821 (commit The issue is classified as CWE-352 Cross-Site Request Forgery (CSRF). The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQCO0wgAhlVdRyxEeGcW+av3qSLV/b6WLk3DFz+HYlf9DRG5+DltMHjS4VEXErX1 -4593H8kLeA2kOq9eSjOv9EKxuxifrWyMGDU66LeWQz2K06zF7gp2GwyWdXocZBks -sckbOGYAdoG2O+SSaendJ2l0PcO0SfhAAqZ3ixI33v2BrouHtyvqeAjgjhvO3dja -YilKXvhOWhDxX+XxP923l5fmGDRtAqIdoiKtnuh7sjWTNPoWKLWWekVsAN2CPKzT -k+0yDRN+oNPGu+wXNcjK1zc/+/f1b3vo1wSKYNoxZeoOFc3mrv0PDiV//gjF4EmH -dTwmreNvTVwkio8yvbukpV01KlYjEw== -=uyRW +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yUACgkQ406fOAL/ +QQCnHwf+Ijm0jDhymNCizscqHaSf7Eifko7E2XedQ3Grh1gRpYvRhXjtfZsCBubU +aTW4+gcg1GckRCCJMIJOfLpm4+8/bxzoE/j9CmJ1sdcWsWfAllz8DVFiIMq/7XMq +NGKw53hO+J2lhU14VtVnLYQ3yBS6+zWZCKLUiyc3wUxhXouHGY/uk5PRW/7+cCoh +gpVvMS84GvxcPfs1Uraofi+05oL12FSs7gKzJaEUl2KKDIELbbM+6XfUi5yoSM5S +y0lkyyZ8r0N76vKPOyKkTkrXpYNA6/qUh/CiafemsNoHHuwp6y6ChymEcuvJ0WEy +ZXT3JzJG9zlDlZ7gDxPEPbzwDbWKrA== +=UPJ5 -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-84180.md b/content/security/CVE-2026-84180.md index e82f4264..fb1589c3 100644 --- a/content/security/CVE-2026-84180.md +++ b/content/security/CVE-2026-84180.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-84180" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84180.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-84180.txt.asc b/content/security/CVE-2026-84180.txt.asc index 183e38e6..02496b6e 100644 --- a/content/security/CVE-2026-84180.txt.asc +++ b/content/security/CVE-2026-84180.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-84180" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84180.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25685 (commit The issue is classified as CWE-209 Generation of Error Message Containing Sensitive Information. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQArfggAruQhAary7elqu01648s4ZNfyp+84N4qJ/MM1wkdWKX21oBeVerU0u0iV -tEaJ7Cq11gO4vc0v5U9bnx+L67t1d6FtOwzlAnQWdyPQKYCPMOLjXcahPJHpfbH4 -KKfnlnGORlF6psRFAuUuFBqDPLm8LK/T6fRJTriVqUfCiqrgpMpXGOaRYftkY8KJ -C9mu4dgfGSycB64yQq0MBg5xABEoFIfeYaIDg2X07X3Hp5UVB1n2tqcgE0ilVDNl -tfacjghnWBO4cI9qNecqWgNjijXO2BH0ZMcpCXxbvHSPYJU8hOnxAwST9A9gGnvJ -s1Xh/Wn8suX1C6+iZa1JEHMyQdwGow== -=vCIm +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yUACgkQ406fOAL/ +QQAsNQf/UcxlzPOih+vvTDRVd+n02iB1/xnT/MC3BN/MqsEcpM4LJF7CUPfOH7bL +LoK1PjOo+i0sN1FVSB4KseaeLXjL4mW0mjFEAlp1+2uhds3UUTLWyo/52yOkFdfS +8jxUkhq8mClUlk2CJK3ytwrfoAoDfbF07GuQEyL6FoilF3guWf+7eLo3SEQ367Ag +tZAKuUyDTPOZIrq6KEHhr6tBCLkxucIxI9RLuo/vIFO9n3uZLuksmFvzaGHimmhm +IhrPoPJFwxVJISg14Js2Yuv4tWpCrO6BHkw7wmRf88KKK3iB/1cHshL5HKAMIi4d +EaglYZuJoIFGV7Aaczluy6mJQa9Vnw== +=0AQi -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-84181.md b/content/security/CVE-2026-84181.md index c8ab9176..3a22211b 100644 --- a/content/security/CVE-2026-84181.md +++ b/content/security/CVE-2026-84181.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-84181" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84181.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-84181.txt.asc b/content/security/CVE-2026-84181.txt.asc index 4be3d9f5..5eaf092f 100644 --- a/content/security/CVE-2026-84181.txt.asc +++ b/content/security/CVE-2026-84181.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-84181" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-84181.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25822 (commit The issue is classified as CWE-287 Improper Authentication. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQBGWwf/R7cLmJr7BQ0IzMmesxzMPZJ+bwNtlX9HZkpm8zPDV6B/LB43D8XoUPAA -kxsIF7uHcl66TVzJ1NyTgDNH9I9dQ61KvC0bLnxmn2efc91ET+bz1wLWqP2kj3/o -M4+ckBc6Aka9BNEAZWj5r5LcqpPOUusSphYyhwuwUprquyAQjrFnqSdMz1VyhdAw -fvNfNP4bR6oHVbOEHmlO1Lk+48ryGu/m94viInVgv0EPHO+ByuHvoLm3sDL1YjAo -NqFrKFsi20JltiUgRVNNdssCe4YnZJ3e3xP4u0h8KkR1ua9KLwiHPecWsG/aviOn -MVlUHoYRorhxXa/W3W3NdrqifIOONw== -=Ey/4 +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yUACgkQ406fOAL/ +QQC5ewf+NKkF5xHhyatR4dUVMRGNLzMAgMkBvx8hx6ivO1dcLIto2B+YpQO2MlyG +2wZ0AnvqM/vpMiJ1xvk9hlKaxkx3Rj8KtNrRfIqcyGJ6dyM4vPPJPXfMj0JrvniY +UjmCYsheHJJC0mN5mwwmUdBltYc0bscJWKJbqnFyUxQOOXqws12Ox5yzL45OCPGN +Xm6dJpQygUafWYgozNmJ9YiNKi5qeStpH+vr8UDIDPPtQ2alK0QXOxfwCbzqvugf +PrwN30kdNXYY7kdd2CshrwwLyBUXzTw+il8u+xQAVSNQpIt8MqX/KDJgd8+mW7Po +WClWVnyle0Pbj3ky3cNPtqKtKBjP5A== +=7cDE -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85243.md b/content/security/CVE-2026-85243.md index 3e60622d..2571c925 100644 --- a/content/security/CVE-2026-85243.md +++ b/content/security/CVE-2026-85243.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85243" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85243.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85243.txt.asc b/content/security/CVE-2026-85243.txt.asc index 00bf1702..c3c86e6f 100644 --- a/content/security/CVE-2026-85243.txt.asc +++ b/content/security/CVE-2026-85243.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85243" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85243.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25848 (commit The issue is classified as CWE-354 Improper Validation of Integrity Check Value. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQDJlwf+P8eVUJ9QDFzIdMKet5n2nwWucc5jjKvq7BGo+yU6eyhM8YCWe1JXAfcV -FRUvCz3/esjdsy8lTlqqSXLEDnTIlJkBjQa6VXbI5Nssu0/YI2nZhzhYJ69pMj4P -eC/MqlGEi0ITV6uSR5l8EPbBmSuaaL0KKDJudQdcXpaqDjP4LtV6CQctqe/OHpiF -mpsLLkOvJhoowTTDoUERpZexkJRLJsAAwK9YQwn10FHOHjq7D+romuvqQThswAly -TioVW5Lpy4LCc1wBclbH6kWu1gudpmOBN7bieOmI+UDctUiHeocxaKx0SU97IwyA -x9Mq1yQC73dw+yWoBZyFWB9DI2FXEg== -=usbt +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yYACgkQ406fOAL/ +QQAC1wf8Cy6mnbuU+un3MZzaQYNvaLOxLo/zIGk7ZUjm74DGNRiE94IEfPTvF33i +OJAGfmLiw5TmEvJfc+vJJtg6bWcaEc2DCTBn1uYrulvbm2gK+eH1G9UH2Ei9X0GE +zGXeQbls7S6d8/Mj+9q8vNpKHuKc7ev9Iglh3Wz0GwqbbawkJ7iyEBLACjVHqrSg +eb0GW2vfGiQ8WbcQeJGrh9XRcSZx/fj80zRoN/mUlTKiTtV47K5mIB4o0PHmJqIJ +NpWoREpVJU3GHzjmLqePhau8zzNAuyYPvPdSclNY8MN5hP4uo1pH0sT5os73Nc+g +NtapHgcRfv/gm7azrfm116jVt+p+2w== +=2W+9 -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85245.md b/content/security/CVE-2026-85245.md index a320d090..68a0c7a1 100644 --- a/content/security/CVE-2026-85245.md +++ b/content/security/CVE-2026-85245.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85245" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85245.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85245.txt.asc b/content/security/CVE-2026-85245.txt.asc index 5797802c..2c4f5837 100644 --- a/content/security/CVE-2026-85245.txt.asc +++ b/content/security/CVE-2026-85245.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85245" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85245.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25823 (commit The issue is classified as CWE-488 Exposure of Data Element to Wrong Session. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQDnrQf9GSy1Qtmfph5Z4MfmdCJNOHqU1YBulGbioq0ohJDkab2MNpA0kH18MayA -VsoeLG0/8/xhcI2ga+KduUsGb8CPgivpHJsJ+vFl9TjfJ0gPI2O6g6owsUR5FJnA -V/u6997hVqx8J9jGB0dijQZfDPyV4+RwMvbDjpEJTq0gtazeMO3SBLysr7bSpoW3 -dHIz9yUIFhGYtqkBUVGrBlvAVEYfhVpIDB8QT3AlM9D+tW8r4q9OaAOsvslLpRd5 -rbdBrv840WS4n59o/49cNXOI1UNjBBvLjghIc8KBmADsfz+nVIlV8Ft2z8LlVDrQ -0vM7ZDsUg49HT3kyz8AzJoNIvnUh7w== -=/zyo +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yYACgkQ406fOAL/ +QQDmCAf8ClDmuTrul930d1xDjUljh5J5EL8CuEVtEQJVpQxRe4ixGKCoYzYRdadF +I/x90n663gfznxEEn7YZ1XKH4SCMcbVw5ewm+pNyoOsIOubNf7QgTMCuYXvm445K +8O8pNiwjJJ+hdQDQQS/PnPoNw1KfaD7Ob83RdQr8+Lmn6ILIetTibh8BxHEtDuRh +sNLBkqe4Gfgb2r0HCwZ9U/zQKLMefWov3V0rph32ncuvMHrVfshkbhIWu+lq4Mit +JtnKC2PgNXXFsuEXyC+HBaP2xpMSdDLbhUGOYPA1Q7S9iVwTFEKllXslu/8KTBKn +VMuclEpBbeze3bUV72tINcZdA2U0Iw== +=XJtX -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85246.md b/content/security/CVE-2026-85246.md index e1cd58c9..6ce2c790 100644 --- a/content/security/CVE-2026-85246.md +++ b/content/security/CVE-2026-85246.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85246" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85246.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85246.txt.asc b/content/security/CVE-2026-85246.txt.asc index b06c913f..4dd2b2a3 100644 --- a/content/security/CVE-2026-85246.txt.asc +++ b/content/security/CVE-2026-85246.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85246" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85246.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25741 (commit The issue is classified as CWE-209 Generation of Error Message Containing Sensitive Information. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQC7Lgf7BJsRHhClZVeLZ8yAIYABG/qo20M7MeXj9eGVJpecT9kAV7j7w6wNIz/3 -YbuSPX/6g747uLb3pJDB5JhHnz+d8d7G79HvYpYUfkBYWJHfTSxYC64YK5Ggx4kQ -JCmNpM/UZZ6frjKo1arCovVTN2801Y7fzAP9CwuaVl4Tb1d2W+mFCzhFo2FZ2/pR -ZEhQp0QopII6R2rx2/TD5sN8QRE94EbUz5bHIHDbl9kU7z84QiqQ116mVAnvjByO -CUnJ6ei+30lGqzrYZ8yzSgGB/a2E4I0EL9HO2cAIBwYXP84Dj0JjPCmmjX/wiZf+ -qFHDcXPxvOOQuil6xTviIRWrHed2vA== -=3nmc +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yYACgkQ406fOAL/ +QQAzwgf9Fyedq+3NCcO1Nil/1JC+fov0zIYMnVyqKagCqRcRQU5voa+kogVnrrad +NwevyCX9GVR2zBrFC2qX8j6jeQWO71HdjICsRIiCqSSplVCOXVvmK+62OTV7L1qM +SQ+kMlJjmY8w8DT91+1ily7cZ974vRdFdvlLeYIUWK/eUbDA8P3f8LGR+DCMLcfq +HH14MsCsqmaMXSeZfoxIE9stqj4C4B7QEJE8cCVCk6x2X70zn+v+GPt7Qeyr2yuI +NeILURz87yuXqAshjZhRJp92h2RWujanOvm1eB+ZkOyk8WjgSUB+upasLHYZ9bb6 +Y/Zaw+17vtdiCm7c/FpFScC2BF+mvA== +=lfdF -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85247.md b/content/security/CVE-2026-85247.md index 499bfd08..bd928de8 100644 --- a/content/security/CVE-2026-85247.md +++ b/content/security/CVE-2026-85247.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85247" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85247.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85247.txt.asc b/content/security/CVE-2026-85247.txt.asc index 4b1d5db4..8505fd0c 100644 --- a/content/security/CVE-2026-85247.txt.asc +++ b/content/security/CVE-2026-85247.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85247" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85247.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25824 (commit The issue is classified as CWE-295 Improper Certificate Validation. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQC/pgf/RIzyXAb+oC7R1yFRN4PyJGqf9C3oA9abpwlwGUZppPLEERt30dEXUcRw -k9iWDcVw6KUgcDP3kJU+2gezVrjyt0PYM7vksqcxJisgxNS+S6y6j3F2QRnhgqq3 -K8fseAbHYWZNJVqB+1W3UMU0CRGlxlZWwKjKwWxVTx2yAiD7v/RQvEgaDeqxHXin -AogiQwbMc99Z4zJ/kq59useHyJWy27hxAwzo9bgosWDJtNtL+OfWLM5t0lHJs3Pk -MFv3XTtwW5uOd2de6l8cyu8z50I65+8uECg7fd462xRItCOVbeWb1I+wGmU7X4ZD -wzb04CMqgxxJJvx00zYatxt3maoPjg== -=piQ9 +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yYACgkQ406fOAL/ +QQArxQf+JvE2tX/r0sQxHKbnbgwdKJaBdX0/P+iKXG/7Ly6MugojOaEzFAnAzZ6u +uCGYpJzhyv2DmtBhC79MDIQH6avw7zj85w740+BerP1Vtjt2ZtsHDrkMxC4Pkjsz +DLUqqdgRaa1i/KskNhy3FpOwxrRpZzDLaBY8v9ozMcodMlyfqe5BUpGp0pxWArTA +mnkyq7NCJh+FnCzgTI1xSm9LX7DqfYvSQkSbKm66U2jFYmk4Kgrul4xri2Tnaanq +p7xG2YwfwwLaZIXcX2yXygA4fD9dKiIkpTYtfKZe6wLeL9TOj8oxWlvxlpq2YepQ +DqyBO7roc2KxrZG0951OcouOFyM5uA== +=uhkB -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85248.md b/content/security/CVE-2026-85248.md index d2430e45..571f6180 100644 --- a/content/security/CVE-2026-85248.md +++ b/content/security/CVE-2026-85248.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85248" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85248.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85248.txt.asc b/content/security/CVE-2026-85248.txt.asc index 72debb6b..ead795be 100644 --- a/content/security/CVE-2026-85248.txt.asc +++ b/content/security/CVE-2026-85248.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85248" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85248.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25825 (commit The issue is classified as CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQCdzAf+Lyi9wwU5TfyAVvVIq8LQvXxGNJRNUP7KRWi2aqH/j+5UmlFmD68H8b/9 -XRVYsdLc/TVBb31EAjmsFRCkjpVkhlrnWIzLBKLwk84oLyJTGAqNg9VHlR+E5pvZ -JC1svboYhDQyoZJqchHkm+BSMh5vSnHFkdtmgZeryM3Kpszy9tadm94nx3MdmFAB -OJ4vvqDLRAtPpNoESvNyTouUBnjP8/1ZJq5NgGRaY62XtwIfN13pX8+WH+PCh9u3 -qNYMXC/+xoNpuiwq0zCX2ZckD4//k/xF6yIHwzc09baT+sGW0nuCqmztMvWdQoEJ -od67VovRGPMc9RgZcobHNmxOLikERQ== -=aHdz +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yYACgkQ406fOAL/ +QQANJwgAiVcmLp8hvtBrCFomBefoQSoBPkF32pIk/jy+6BJs/9f9dPkMExenEUgq +VrscNt1OSaYbyKvkWRBATvJn9SJ7aSRot6z9jafl1ATua3B9hPjKLksxQ24LxfqJ +fVCiLsC+eq6gV0M3tSpvdUwcqhs6TdSHMo6fcHQx+lxqAKQKI3AJiacED3S9jdH8 +o16LQbV59CLo9/NmvoltQ2JQJL9rHuT8eGK7HdKwEJIURg31n5gj1BXw01mpsQev +dD5JYacfqWGEHpH/0MhFKrx7WmlBeQyFRMY3MZ3eJdAFpWdEP1cJu2p53kz6GuP+ +Ijen2tSHiMwMxcaaiiST+PjvGAJzRA== +=1fT9 -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85249.md b/content/security/CVE-2026-85249.md index ae834c0d..73af59aa 100644 --- a/content/security/CVE-2026-85249.md +++ b/content/security/CVE-2026-85249.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85249" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85249.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85249.txt.asc b/content/security/CVE-2026-85249.txt.asc index b5d9f60f..cb6b0098 100644 --- a/content/security/CVE-2026-85249.txt.asc +++ b/content/security/CVE-2026-85249.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85249" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85249.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25819 (commit The issue is classified as CWE-20 Improper Input Validation. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrUACgkQ406fOAL/ -QQAnOwf/dEJIoDtgnpkTPyZICqUVOe+M9PbLJuOLeA7izvBK/qIsvW56XfZfgzBY -dzzuZhuMN8FIqY0b1dof/p34WmLLmUxlWc4rtZQQHLjKqGPpTd9gOpgOYHotc5rA -ODcQxYjREMnp25wfybV+hbqRz8+9S0ihq9hNDsLX4BqeWb3GfLWXkzzWlhKlx2zW -YWklygoRijWPNBt9e3sasiv980nwUURd54DfPiBNY36AoFMTWOC06d27KPF56qyi -89cVaWbajSoxS1rn/YhgRcB/Mjj/umIV3FUYuGETLI/mp2HOvWuUe9E1cpoX94qF -T1jLrHQfhx5XwkP/xFALoYD9jPdEvQ== -=3EpW +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yYACgkQ406fOAL/ +QQAPVwgAi1/got1bXpwG+zWVlIHKwqCdr95lvKI+Y7V3wR/iRg7FhsJvzZMCIYdv +Yi7Ysj9ZBb+EVRdmL9epQrkekAv/zkWqCVFJlNEJK+ZxbX/Zo7V0E5QDkVJfRROH +C1tu9LkqONGMNTJ3JR/6OaRGbcmSxWFzrXAlTdeiT/6F+42pqlfUARwVSJQsygjQ +F7i8BNHetScGlczH6sNkEinWZvkVQM+uLD+/y7PdIZali07Hl09voyrS/0lhQ/6U +/PvzCvPubN267mBfOjadTAmuTINegqcTYo4lobvqJTHgsLhc3bcoXRJUDEKppaz9 +SCmayScxTQT9YLZ+a9gaHGM6qh9+Kw== +=JPKP -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85250.md b/content/security/CVE-2026-85250.md index 4f45abd1..a2bad08e 100644 --- a/content/security/CVE-2026-85250.md +++ b/content/security/CVE-2026-85250.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85250" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85250.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85250.txt.asc b/content/security/CVE-2026-85250.txt.asc index 3c7b2ff9..f0b71947 100644 --- a/content/security/CVE-2026-85250.txt.asc +++ b/content/security/CVE-2026-85250.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85250" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85250.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25683 (commit The issue is classified as CWE-611 Improper Restriction of XML External Entity Reference. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQDsGwf/a2r2jsRfyhjfQju2boAvhU0Mjwle+LEKzSmY1aCy+rYXer+PMtRcSqEY -sFF7vS38U8GXknEID2X78iHk6w8kvPY8DaZLFyE7NmVJwCiJwx1EropXrE+1seXv -5ZB/vnGvl8QGQfs4voXFp+ZbwCq67OKKWIqKPsyUeBmP8JHMRzbOOxBfadK3KZ6E -j+AHmOwzPIwEeqWcfSb+U7/3oQGRdurY8LaUckCerBbMkPv7J/ZTYtB826rp2t2x -coMXZn8WoB4sINPgOphFJchkwoK0lsqNW3du9AfZAZnlGWFSuIm0IFJ8VIz6va2m -Cs0kt8udfQ68zjv3ONIGN2hNyt2giQ== -=TvsS +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8yYACgkQ406fOAL/ +QQAmcAf/SnzA36+/QNvWxM/P4iRuSRlqv5wyiNFDoGOQKabl7mkKM77vgZ8iKS6h +hG+sbaq1mGLyvhQ3T3RIXHgNoXj5jNX39FIYAKcF3d81fW+oxlqj2/CCpxV78w69 +FCxqXi/wQSrHZk2pe8l5sHXbFTHsTmgiuhc6C0qG1TyHl0QdCs4l2grG6cAzYl9f +d8w3aeW0DLR4mmy1ao796scNNl3a+Vu57MHJHHgOe1VWOIJRCOBxcAbAY+kC0hay +DsyWkaCyG/dqBeK79Q94In/RkxN1FzOG2jEl6y/tIYD2DrLcUdumtW54bf8dCXmn +hTWPv674okXm6+Ifn8uge7uuPC0V/w== +=hzwH -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85251.md b/content/security/CVE-2026-85251.md index 10e9e506..705597e0 100644 --- a/content/security/CVE-2026-85251.md +++ b/content/security/CVE-2026-85251.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85251" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85251.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85251.txt.asc b/content/security/CVE-2026-85251.txt.asc index 6e701b7f..9109d343 100644 --- a/content/security/CVE-2026-85251.txt.asc +++ b/content/security/CVE-2026-85251.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85251" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85251.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25830 (commit The issue is classified as CWE-200 Exposure of Sensitive Information to an Unauthorized Actor. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQC0+gf9GFcbLlurSSYEpkL15hLp7lrwpeO5EAfG5TIuYTySYVWjtj2sdtbKvEii -bfiZGpw7vPTXwfLCrixvDMSpa4TJNnji58IMDcKwe5sr0GbNz6rHJ23VrqoAB/9G -qhvDyxkiudVRCp+hwbV5GBpe1e1TexTuMsftIfFt/Z2aRDFg+jzluWodCw71dtq9 -iuybdzbDAWoUr+rtTD9xmHHg5KQBx+Lbc7no90BE/PaX0Mo1HD6N1WFt1ZxEBRiV -M8y5P9V7/VGGkRzvl6oN8pcnEpjpIuTdCCwziCDig4mvdO5+y9M6BYv/Rf8K2zYq -e3j7C+rGhvP072C+Q+YcEnNKF2Z/Qw== -=ynjf +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ycACgkQ406fOAL/ +QQB8vwf/YhQwtRQ+yLrXErdhKzMnOQgtUGjd/v4+Ma4Xba8XEFZDnmQMmOWbjyvd +hK1VKk8TI6DFTODgM9m1QWyIPMZqMm4Bfa/U0o5UIcy5BiTcZlAwWNRqg4RRClmJ +dCHcnfZx5XNsQjHhdqgeb6Em2Fgof1LRSo+ltwjwJGEeFZ8gFh9XY3q7IOdGwNZm +dXIeTBdVOTmB8Pn+5Kq9UwXvnc7UhIScOg2tVuJljSMqssszFDyUZRjhy6Wn0/y6 +/6oCmnC0DIxOZeVTJq+pNm/NpRNmoHhWteBYOmhRhk+oXIhtO7ZNR9z5PwhSDhIn +kPdv/sDuaOj6kKFBJosIK07Za3cv2w== +=YHm2 -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85254.md b/content/security/CVE-2026-85254.md index d22e6c34..a27bbacd 100644 --- a/content/security/CVE-2026-85254.md +++ b/content/security/CVE-2026-85254.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85254" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85254.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85254.txt.asc b/content/security/CVE-2026-85254.txt.asc index 02900df8..2fea1fb2 100644 --- a/content/security/CVE-2026-85254.txt.asc +++ b/content/security/CVE-2026-85254.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85254" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85254.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25831 (commit The issue is classified as CWE-178 Improper Handling of Case Sensitivity. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQCwuAf+NrIYHUFcNhMBFID6CdZDTt+srOI6HIkl9+mybfKYRCSCc8q6nqex9tsi -nx6RniyEDD1zFvGMp6d+AnycShB156yyKYqiodju+aOmTNKw+gZw66lyX7INmTAe -JY8PBFYqFcXn4Q+4UqsDMRlIdQnXyIiLBoB2TIo424+anr/QsOSDwLGuOKuaEdgR -JrQ+4cGB+uB2YUsZwhwy3xdALRRW140v5Xw24uV/afCytv04/o79MYuA+AxdIcQE -+xKMS5+YGiLvoGw3/rFnRv82iwcYQsvjNtuOEhFduU+g+6gbduYHfG7UJgWEjGaS -4R/UZpom0J8JROu43CY3k/lTG7yXmA== -=saz9 +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ycACgkQ406fOAL/ +QQAx9wgAjIkAWeJXCoo0phqfKAVU6emUINNIVJPm8+1p3DjZpDebQnJmATlpMDCa +lX02EM+00Va0980I0VmjAZYsjf2si5ztWPz4wKZRehUz/yf+SxgaprESKrWfC6GC +Q0jiCp8P2sMECSJk8+8Nash7kEfKsdj1o0J0gnmmbAfifZfkUUbQg6EuqPgq6IAR +iFeBMABR2RT7p8qjHsfYPJOA8IPjygHHAzs4D1HP19fok6oU0u6lYOgXfqkKirip +BKLjSJWwDgximAXm5IY/tw48A2GCbGBJRnrwWuHeMbFVKbj/gs7Jl/4mj3UAH3JI +VErog9zZ6xEd5TvEtlNUDmargFiquQ== +=FcZx -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85257.md b/content/security/CVE-2026-85257.md index 8edfc823..03bec4c2 100644 --- a/content/security/CVE-2026-85257.md +++ b/content/security/CVE-2026-85257.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85257" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85257.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85257.txt.asc b/content/security/CVE-2026-85257.txt.asc index ad11c6ef..99a3164a 100644 --- a/content/security/CVE-2026-85257.txt.asc +++ b/content/security/CVE-2026-85257.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85257" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85257.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25742 (commit The issue is classified as CWE-209 Generation of Error Message Containing Sensitive Information. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQBsawf/WITs+/IH31Qn9PiT92ZzLOZOBdi7377A6OLXAkUJHGSbivfF6t4eY4Zl -7dtvVk4eRhZPewhr3PR8M5DaQ+vqbVpi0SXZAVRJxxzyvzqgNktKl3eO85FbUloC -8ZioTIHXe6WmhHDwk7POnu0Qu+dNsQrWnQNTldO2eYLEoDGwrec7svSkBtHuTEkt -aJjL1ZhIchAyys4iKWfgiK10emiX4GbdQ+proEN4V8xfPEz10A/tEW3WBiRtdtda -Q5DFtSzYkuZovib7lNsscnrVHRmphYWhwNWiQaeTrOJF4rSSP5Dt0R0UJKTLGTxp -fbDXg8HMqDCtmCChnPZpRG8SUmYvLA== -=m9IW +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ycACgkQ406fOAL/ +QQCbgwgAjhFiPvp4fOPqS5ijdFwz2xz/C7SuUyiOKUn53gb0vaQekCA5z8w+sV7C +LHM1EaGqSKclraJ9nr9+b4oEqfusCzf1ft7t/VfJsIS65+Y6B9h1q2NbqhG5DLl7 +UBaKlbgTb17xr3C6doiRXtuS85u9BkYSkfDRgb+SnNjzUr42iNwSQVS6rBbK08vg +2wojFQxlS+ct8BwsN0KjIUD2Iyjx5J+38+HMrOuntMO5fR0fR/+mI9ohjSussbCt +ptt4RRGzXy7phWRMvTyL5APGPVYInKx4rnDT7wlh4AzK2lvC54FYGd1fOZBkm0kw +8EgtXq9NsCLKOIVHAVE8xieA35iOuw== +=Z3/i -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85260.md b/content/security/CVE-2026-85260.md index 63a0d43f..22b08c6a 100644 --- a/content/security/CVE-2026-85260.md +++ b/content/security/CVE-2026-85260.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85260" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85260.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85260.txt.asc b/content/security/CVE-2026-85260.txt.asc index 5f2f6d50..be6ee231 100644 --- a/content/security/CVE-2026-85260.txt.asc +++ b/content/security/CVE-2026-85260.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85260" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85260.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25832 (commit The issue is classified as CWE-532 Insertion of Sensitive Information into Log File. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQCM6Af+LP8uUhXMbduIPRZ1QrITiw/jyxYpABogeB1bBbJY8HYCBSPjxP+6IeyD -add6lm3WByzOx/alWLtWbBbKu/NB9i9qQC3w1wEVzS7p7lnpA60XLZq4KtrMa/dP -a3Kvh5ggPLoGYguqaZrLTfpMR2zpr8+eDQ6/PADlFjzh60wogB84jDDX2i2etKpA -692xTaywnXNaII1OTmALZS3lDPzo+pnm8/sTz6Go+jA4dbizardQZ5VborfGwgdN -Ix+TtnJG2rR84fGaahBNdzyJeHZ39o/T/fa3KtSaF1N//6e1cEf2XEaJYx/YgSkf -z5o5tv3Nfu1Bzkp9Ql0zGoWRWFzChQ== -=+XeZ +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ycACgkQ406fOAL/ +QQBoLAgAommjCn1rS2jE/A/DtpT3eEVO7xBES6BA7uF0O5qfTt4hIFhdlJaK4zzE +XMo1dYsS7x7VFEvwz4KRfZaMg1ciKbSrjQCDF+o/I/3VVmWRZsjmqCFCWCDFZbCV +5PoMTUKnQmKFD/+cJN1FRKz0U0uJYtRsERUF8QC+EeRGuf6euGzOtDgsDQaHCgg1 +W4mB3owwXKUIaZJVm2AQlYSopbZzSqXkLCj0j7PE+SJfAYYY4OaiBfl/1VC4I0FP +SdA8TJharau8CG6IsgLGTJs7fLYlDhOmq1Ev94ZIVJhz8FoTG5bNnAVoKtls3IX9 +xCbFcT6BXll/2CvBuRWayYW2chQJtg== +=ZU/C -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85296.md b/content/security/CVE-2026-85296.md index 6d47daa2..6ff054df 100644 --- a/content/security/CVE-2026-85296.md +++ b/content/security/CVE-2026-85296.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85296" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85296.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85296.txt.asc b/content/security/CVE-2026-85296.txt.asc index e522f58f..7e6421ca 100644 --- a/content/security/CVE-2026-85296.txt.asc +++ b/content/security/CVE-2026-85296.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85296" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85296.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25641 (commit The issue is classified as CWE-488 Exposure of Data Element to Wrong Session. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQDXewf/aoyxF5Z1jooYzrjYGlfdHq3F6K/LsCQV1SuRffkdmLGtTaMOyKsZs+4t -ziqnY3sZ4/yqKTzr6lzA3yOZuWHjeRwnZptXQVEnTMjhhUj2ORMTAQDFzHTyxDlr -u7AZTgaT6IXOmFkNwhNqBGLPDnEBRapuSjlfQxHJHGnQxT1BGdGUA4swM2r7OWve -Zaqp7Z1QFREn7SmHg3RnEpVzNfrLZunsjXguq7E3tqsEMEUITii0ltCBaamlGHG4 -PPh00Va7oN4eWsCUPaajEvBLYZMkLSxsgsegig1mL4OdQVjLdE62uIByklGd1HOH -WtAQVbt4eu2VnXASAPgrOvvd+rWIjg== -=bxLy +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ycACgkQ406fOAL/ +QQDjKwgAhgrNnJMhUivE81YV37XxQLmKA0Od4J7vgYEbODiXTOUlyhKvLb8WPpbS +KcznGJBJvCkLKyTtRnXHlFaQoRl+ravG+qgjgzGl8F82bHr1tRQ6jFPyX4jf68J/ +t8tSh+SP2mSo1Q9W7mUQD8281SiNyO5+kKUI51hcPXjuzetM2BCdD77rZ13hwZS0 +hXqYnK3dwWMVSawmcJeN1UglFG+bViV332pxjs+IFatGMBT4gy04kkmdYfDGzCna +yEfu+IvfDZcypZUiZZ7K86UzyY8Ndfql3eCkcC0hDBof2E5VtirY1mT2+yZKnnag +gLeQ/fn04f64mLff+C8L6rNYmyKp4A== +=x7nM -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85300.md b/content/security/CVE-2026-85300.md index 2c00e21a..89200054 100644 --- a/content/security/CVE-2026-85300.md +++ b/content/security/CVE-2026-85300.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85300" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85300.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85300.txt.asc b/content/security/CVE-2026-85300.txt.asc index 7126c897..1bfc973a 100644 --- a/content/security/CVE-2026-85300.txt.asc +++ b/content/security/CVE-2026-85300.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85300" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85300.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25826 (commit The issue is classified as CWE-276 Incorrect Default Permissions. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQBVdQf7BNo5MhHVLF7E4fT/nCWcSB9p41C07A4v0BnKDxdZG39KwKIye9J76YMk -p4+TsJTkJN1uZTPNsNKkYjZT5Zgkob00tPVVVo7j9H26EmojWqBD06y9KJKLxxnu -LjyVSUvOkJmLJm35ctTyqXxx63mkdE+6Ogvhr8ZOXamHadlfUzRcDj1vJiwy1txo -WND41SrE9KlwsIewnWe7iX2JzNjjm9GywLORaB7a+ewVdj5sf+O8xUyhwo2DlDlT -9E5Sox5xyicEonT1YU9fEEQBPsEs3I2EU3R3wX9p481dAZ8AjZu05R6v/h/bdqbu -skpz9akYn/QFNvAYU9B3DELA7HIwww== -=91Jh +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ycACgkQ406fOAL/ +QQC8swf/QvYXgHl3v5K7ECt0SufeqrgW89hRvey64wVtP5paEqtHGfsfIFNhBXEV +gqDmVA55Xey9GePkHDxvmR37wnpPuhh610LtLY6uApaHxp8MXAV+ZHWkOCWvw9W+ +lgSNQc1Ssz/45ZrgiFZ8F/K/e94hN31N34FWpD7sfatSNPrBpYJK+zGibdxyv253 +/vKqIHuYslL3ukKw51vfGbUr6InjgShYs/B7/OyNY1w9MMigmKiID/lOJXiyvDMB +2uA8sgBUoCn70bMLGZeiaNEzBZpPjO9+Vinb/HjHqNimcxsOoB2ylDpu7NdicgNs +DyNMMQZW2ppmpWpo3pN/hHgJAFjQDg== +=PzE1 -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85301.md b/content/security/CVE-2026-85301.md index 6f6382fd..e2c6d07d 100644 --- a/content/security/CVE-2026-85301.md +++ b/content/security/CVE-2026-85301.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85301" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85301.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85301.txt.asc b/content/security/CVE-2026-85301.txt.asc index db50bc48..76993cc9 100644 --- a/content/security/CVE-2026-85301.txt.asc +++ b/content/security/CVE-2026-85301.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85301" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85301.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25827 (commit The issue is classified as CWE-287 Improper Authentication. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQChgAf/fYxflNpfwa45u1/87er8qpKjWInE/veG81Ux9Bj0QGRh0B3zuGs4M9xb -NEzJG+ZoXAg0WCM11WbXqReQ+P+4OojKhADXIc3dk+zgp7lv9L3wLAjkoelqzRQ+ -Si1gdaLhhC1Spai44BjyXrtNJJ5LNOiagWBHASqq4G2fX2aC9u+dTo8fRqd0LWh7 -OoVbYQga1RJ4JEYw7t1tm9QLt1bxJ9FhvseraOO5GxwdUlYW3pp/ppMXug54Y7ut -LbTYpsz0wRq291D+luSZD+kUvOTiBr7zi5FfueOYWM+h8Z0bfgO+AKJFD6iFvVKf -svNxJ1iLFpxIG2JsEinqm8zG46qGKw== -=ycjk +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ycACgkQ406fOAL/ +QQDijAgArQ8Z1rG8oYSGMhicAAJ22HSo8SgBV0L1X6Pe1Vm1zrDTA6KWwWMetdh2 +5PbmsiD9utAgK0Yl5vTqmr/WR3t0LHO2oi+KwHhViQPZ6+RYnNO4MnOSRK3h6z6S +YjdgHcrQQhwgVWHZy6JPZcPlCX1l5n0IBewkdBBF+STHLmVvUmn8ovDWxqKqsVxR +mauWoxiPtuQ+qxNCl/il4AJUuJTMKvFp0l7aUkhF897mjed8yQsBnL03HdynwSh/ +C+MnPsCB4JbMvl0SKsBvF6YwpCazwtdr34LQ30KljEqYmhqTvhsGyxxPkPGAsMP2 +u1uzKc+J7KkLkcX81vQ3zO7R60WJSw== +=Gkiy -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85312.md b/content/security/CVE-2026-85312.md index 438db24a..0a83aba1 100644 --- a/content/security/CVE-2026-85312.md +++ b/content/security/CVE-2026-85312.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85312" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85312.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85312.txt.asc b/content/security/CVE-2026-85312.txt.asc index 4fe9c196..4df0b66d 100644 --- a/content/security/CVE-2026-85312.txt.asc +++ b/content/security/CVE-2026-85312.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85312" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85312.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25828 (commit The issue is classified as CWE-20 Improper Input Validation. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQCCFAf/TJghcb+dX5z/9GLh2Z+uGScAA0OzBphOsioKsWwQ6Cjr8sMMTLpmyOkR -XLy5cu7OXTzZcwnEiFet09RKOlNdD9R0T1RMPZIQEOXqUlSQBwerbv+I3oy8IW8s -2IWpRMWqTl309a3KQAAzV13CbterTYHylS7vE06pCvDt28GrKhl2nJEnJTWIRcam -10kszKhw4cCZu6ucv5z/gdmaDHaXqvsjSmczmUotBjD9O5DT71WP3oySqkBWlNTW -Kv9DYnavt7R2yU18bPkyQ5oseQn+7nlUutVxhEzntafUf72CVK6fuW/bh2XAPVg6 -hmNj4WcrGiQ3u2YCKl66sHXxOVCIEQ== -=sykJ +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ygACgkQ406fOAL/ +QQAU1wf/QEdGrcxfEsqL7MnelpchaQIonsmbYgYujlceq8S+K0lfmwG8hYQ0sFnv +DtkLBfQ6AEjYz6ouwaQtLsTMwCJAn3UmgBnGEtpJTh6WfJrdZzYsPZR+CEcnJcyF +dsRLpDSpU5jdONZqYJiGZ8aKK9rKvl0AgVKpY7Ku4qWT1yHAnJ6MFSHN1sWry+3C +85zrWpabLRFl8Dq/hiGvDw+SXESCntKOSFHorXS/fOijXpSejiBMXw7mjEZdFgXL +uojO5fUEtTn3H0ihD49ULM2o+9CRA4Gxn8auqkgRv6zEry0tH3BBrt8G74tRIjWr +FefALIFKR2kZuprDcSY8z2ptscSe3g== +=iBDR -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85313.md b/content/security/CVE-2026-85313.md index 929323af..7981a473 100644 --- a/content/security/CVE-2026-85313.md +++ b/content/security/CVE-2026-85313.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85313" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85313.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85313.txt.asc b/content/security/CVE-2026-85313.txt.asc index ccae2cb1..45737bae 100644 --- a/content/security/CVE-2026-85313.txt.asc +++ b/content/security/CVE-2026-85313.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85313" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85313.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25829 (commit The issue is classified as CWE-942 Permissive Cross-domain Policy with Untrusted Domains. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQAKKQf8CJ56f9Uf5VEWRrYJawLwdaEQ/bsODok6pPBneSxXAvE+dFbJM2MW37SF -lTTUnC5147hs73whxbysK7NeqQD2wpWuLmngPF4OZMEjiJJV5JPCO5CnPezBh1rl -sGfOIUNA7roQovpSrbPqgHCdYCFvUi8SIDEFDi1ob/e4QIC/O0OQ0sMkyLJH1Gsh -/AfFTsQlG1W1ayct8OiMwP4w9SwTAY31gFnzoHcRMNNh1hEKw4vzx2MltHoEiThj -sCjcgXUdU29ZTpPkYzLA0SAau2rVZQ3jbIImDHA6O4xZTKM92UNjMRS8TP232vCo -yLgAdKfcTKIwu10RMNbB3T0ncDJTZQ== -=7d5V +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ygACgkQ406fOAL/ +QQAbdAf8DmV9yd6sOnEj9RMCtmgCSQ6CCiUyKGukD1qTMMes1Tswn9bfYLkRsw0A +/HVaWNwMDPG1bm9jeKMWLIFcbTpfT7+M/ByoMh1By8hUcldnQnHMt5kCnL3+tQT4 +JVDk4c2YNd08x9K8UlUXH0L77R5nC8S4eXY7yHGGPxKyzUvg3LpIqgCQMypcMavw +zr2SO3x6PZbD9i9rsepNLIjqIi/7wTZz3J8JCs1raWan1c0p1D8PeqQ7apv1aTVr +rxfn2kyhTyTsrvgm1KxdTMegMX0Jncn4NdVW2VH8nQwP80iVR+m+3ifz+czslZNr +m0Ra42WyghUYhROp8LxrBrmNzcXIBA== +=wJam -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85314.md b/content/security/CVE-2026-85314.md index bdd141be..899b913c 100644 --- a/content/security/CVE-2026-85314.md +++ b/content/security/CVE-2026-85314.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85314" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85314.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85314.txt.asc b/content/security/CVE-2026-85314.txt.asc index 1e01f70b..c4506a01 100644 --- a/content/security/CVE-2026-85314.txt.asc +++ b/content/security/CVE-2026-85314.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85314" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85314.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25568 (commit The issue is classified as CWE-20 Improper Input Validation. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQC8Dgf/ewFaHavt/oO+Nr7tioVZ9+Hkvdf2306apEi1tTy0HxeT5N0s+7fTudyv -Rf83vDB/PQWwI3RnGFYvSLYMcSwe99NFSqrker8smPonGeIJOAbTZmmS9V4Sd94H -xZjFzfO9v/g/mm+lTqU0BA9xCvTwEzY/zg6MhvxDLLzPjpuAQjAENL+jC9CqtYpS -Vowaldlha+4X3nADqTeZgodIo3Rtjzj1ObybluKq9k80QtjX0Zr3qLplOFKvrfWw -onH+I7t8PFU6iYcwScawmiGTP49H3b2P0DMmoyCNs8QkukDBBLQ1sw+/qCsdV7aP -b1Ze39m2OwekLBO4joMqSF5kccSTZA== -=qozL +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ygACgkQ406fOAL/ +QQAX2gf9EhorSlUADf9uIh4fRvX3yMrPloxHIQ/6GP/Kx3BiBlq27Xd0X8/6PBwd +XyjfAkx9+2YLUObiGsUJz7tRhaeLpUzMpDTzpNUZqLEJsofdI8aV1t9iE2JY7DAJ +Nh4vSXfO7vovkJvZkojbN5ld80R2WO7UhJigg4UUAN/uHsOinG6WzFJ4kRqcxmAx +HJhakGWbdAtppEdliQn3l8Z/98b54vo7llqu+Z4N+HgtZ9RDyirspRpNr5cIILCS +xEmnvOVYt24v3vPAeEXYC2jmVg8YAKTGDGvcfQVI2Bpiopc+5A3jC1cIjnEF0Fv4 +QaZ8Km+SLMU5cshotaKDyb4RGkSuOA== +=a/Hf -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85315.md b/content/security/CVE-2026-85315.md index ff546321..2fc161e9 100644 --- a/content/security/CVE-2026-85315.md +++ b/content/security/CVE-2026-85315.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85315" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85315.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85315.txt.asc b/content/security/CVE-2026-85315.txt.asc index 06ef6b51..cef0fd56 100644 --- a/content/security/CVE-2026-85315.txt.asc +++ b/content/security/CVE-2026-85315.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85315" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85315.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25839 (commit The issue is classified as CWE-209 Generation of Error Message Containing Sensitive Information. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrYACgkQ406fOAL/ -QQBI6Af/bKxgr0F3BWHisVN9ovUj7vYtTY03xYDPVp/NO+jOepTr6Gu3I7apCauZ -a7Yfn2SdNsTcGpqeeQnC+tdigbPfkizoZyEh/8Q/YJe+b9ILa5dPEe/jmujqtBgp -qKKj/x9dDcVXZEL1/CE/aEWxXmtCIWgPTOGDXy8PDTDJkwkWEsYHVzY/9FlOyqiA -O2P14YvmecCblyc8O2wYWvFk6SqdmCNAgMdNg+Tdo0GIJrL1+MT1Yl35coPbLoSz -hhtuc0golOPI1vud3eRTIm4YaE4xd64uVMDNvYV9lGJmuuutFq/JpUyz8Qy0P5xE -ehGL6yuYu/pE4icQVrJBoBZ2eynfeA== -=bBKU +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ygACgkQ406fOAL/ +QQBTMQgAhOQF35EjxW0YXH71Po/pYwRwoa7GU6JRQBAFaKrP4zL6+shxHFRr+gJI +hiO1bAT3aA+9PGtSGpFuWQrKDV0cNhOD94D6b+WtZuv7nsscdKHILVykYAQVOx1k +WWIgwRcigtXyrtSU4ZqVuUaZjavKNbV1gxBjSgCVGwB4fPw+kyawG1BnQkTO2RR9 +omENHtzkbKQzGkw7uhJecEhfdtxMFRmjNIbb1EJxUh6uSMMH5soBgoyqTGXHHulK +FH8TQulzfAtmzhejQnsVHhd2jy27CDAP4wd0mu+rXEdytuWbKcAKQg7DCrLviRMz +2RsZcGUgut5w8uThIMzYLDmY1l7UXQ== +=5scH -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85316.md b/content/security/CVE-2026-85316.md index 9c7a0d61..d1a7f642 100644 --- a/content/security/CVE-2026-85316.md +++ b/content/security/CVE-2026-85316.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85316" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85316.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85316.txt.asc b/content/security/CVE-2026-85316.txt.asc index 3db0f544..eb347429 100644 --- a/content/security/CVE-2026-85316.txt.asc +++ b/content/security/CVE-2026-85316.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85316" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85316.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25833 (commit The issue is classified as CWE-1220 Insufficient Granularity of Access Control. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrcACgkQ406fOAL/ -QQALcggAsnatAVMfPdOmkSIEVPV6+JChrkNIuq5YS1PxVgCjcLPqeCMUSnl9wNM8 -RKmqwBaI6JeTSvXapsSRsjYi8qnEmEsNnQ7pSY3+mxnT+6/hWyQ8ZinQJNO4nqbl -B4BRjMlhbDRVLOPxLj9+8XFcxYI3lanjWEFUer4sbWdBPrORrZK8d99FAqZFaQhW -Z+dgWsTt96LUCFkcRG1oDOybchAW4/Dm2D59ML1yzI5xu7OjltxfhwcwL5ibW0Nh -nomrf9XMpZm7KPLuCbWLbs+qxD4KcseuKzpI48Sv0t1g4HbaE1E/9McF/mnkZQyA -gmk1DyeVSrqOM9otpYOkhcZ/rHW0Rw== -=Hw2A +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ygACgkQ406fOAL/ +QQDSqAf/S27wFEq/vr7QdlK9sCddcVFAOi7cN7SV7CoIeuLO9xxZs2S7TvWEP0MO +aYv/EYcFQ8xVvsasUCiPPgWORWtpqiYxFZCVOrvJmaZSvbmx2NhICcWitqZBo3u/ +km8CQjmv/zOY/+6uEA8qUTSX2bZY7t+De+WERcDl0ZnC49x8XYRK+cTftHMU5NLc +jKp4B0AKu4lKrdtGMVhbvTtmgfzkFjdQxafwlCChLomZylHpsQzLnrAkyGoK+fep +Eq5dJTY256OzPPTx+HSp4B9+ne5TkVkfgF8CokYYi8VHXvrSYs9Ex3vUCa6u2+cI +j/dpCRS6fWoZxJ2XnNk8uAKtOZQgHQ== +=6jTB -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-85317.md b/content/security/CVE-2026-85317.md index 7cbd86e3..f2784f2f 100644 --- a/content/security/CVE-2026-85317.md +++ b/content/security/CVE-2026-85317.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-85317" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85317.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-85317.txt.asc b/content/security/CVE-2026-85317.txt.asc index 3b008f6c..91467330 100644 --- a/content/security/CVE-2026-85317.txt.asc +++ b/content/security/CVE-2026-85317.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-85317" -date: 2026-08-31T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-85317.html draft: false type: security-advisory @@ -24,12 +24,12 @@ The fix was merged on main in https://github.com/apache/camel/pull/25834 (commit The issue is classified as CWE-524 Use of Cache Containing Sensitive Information. The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmqabrcACgkQ406fOAL/ -QQC/zggAvHpqdWUdID/fGSNALVD/3EcMWEmcSoJfKb7e6z2LJTbBdaJRnDL0VdOJ -3rjkTH6kEDj8XE78ZAtz4g1aJver9D/BVkVsKKGlcGE32VpQiyOL5/e9Kkh1qGvV -tXhIFrLFQYkKbhfqe6R+J0kpCPJBpttRRA9PBeuIDs96xG4AIculgmM5WfW0+o49 -1ENibyBvTzECZ6BCxOqC7KF3qzNCHrzU3i11nlRb9vyaOAABHjpeihVKARzpyU47 -dhUgnX2RlRZxXSLqwVJgH3cib9eoj7pYFYFxuS4igwTQ2D+yFe0qiBsirAhESP0K -o7xN92OG7+hmOQBtXP7aadEk2zLCQw== -=iq1a +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ygACgkQ406fOAL/ +QQCCeQf+KN+W7Pr7igMqBQ2+SjmxuW4OA74FlCIPzfVKbjQcfe8pWFjG/U/PyPge +ul7xkuJT+LsYQ7sK+KMsokBnqczugkEcl3HYotlKmDSIIYpeNExBEpM65qm47hrL +kUV0UNpIImFa7Gx2YA/8oMWwxj9vty/ExIJrMNByw9rv1EBbhs38nIB1VW7X3ovt +F/cZJ467YlRhmJH9LD9HmWyaWgAxqoo+pS63b6YzEdu4V9xh0iXXsbH4F/mNEN3K +gO1tSlvcr4L+WPCZMmiF7BcfJcXop32fFUuZREsQRrjjq5WI5NJCRSyu2Ne+kJxA +SSvSupGZd5aZBNRExX/xGfX5xdW0PQ== +=q3fE -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-88901.md b/content/security/CVE-2026-88901.md index 45907f8d..5eaab8de 100644 --- a/content/security/CVE-2026-88901.md +++ b/content/security/CVE-2026-88901.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-88901" -date: 2026-10-14T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-88901.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-88901.txt.asc b/content/security/CVE-2026-88901.txt.asc index a3cf0b97..5e7dbfe5 100644 --- a/content/security/CVE-2026-88901.txt.asc +++ b/content/security/CVE-2026-88901.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-88901" -date: 2026-10-14T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-88901.html draft: false type: security-advisory @@ -26,12 +26,12 @@ camel-smooks now parses untrusted XML with a javax.xml.parsers.DocumentBuilder c The issue is classified as CWE-611 (Improper Restriction of XML External Entity Reference). -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrPQtMACgkQ406fOAL/ -QQBD5Qf6A2XHACiefSRV2h5hDf5Jg97kcLq1DLRUVcRnGjh8UOOztKdWGCfIdqYB -flSsTa/Q/jIGThkVB9T/11V2eK3rb7I5IXlFO7Uu5+YNY+PJtEvB9JZAMpNWnXHI -lP0Eh0OR0Oh2np/d7AUP9Fkyjk/8s3/GTS4WCDk2hAMvy1DrcgdBZmlsjtWJ2VMl -fDB0bwCO+Io5TbNv7pndKXvbj/B+Sz0VH+JA/WVz0q/CWx1IykfFYyCGBhnjaGp2 -jLDWnfhnq6j3rVRgg1bc4Asz6f7fhQC8BySKvzdHPpOZEqRiSRPuFLp9FS02R5xi -1amvl9GlzugsL2beTXwmGPjcN/cjtw== -=iUY8 +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ygACgkQ406fOAL/ +QQA2bwf/T0ys6vwM00pi4YpnE57yrQuCm/ijP8d0IWlyEnowwv6D/4zeVVcZF965 +il1GcY3/lIeBKbcQNGg7fSHXDJXsRxHnOP2shZwg9XXXRomsuP9e/kb62ulCwLJ0 +0peTl4o3hJBMp1SWdDTwIuljud8/4qJYevF53r8bypX1w0Qj69L2kj9IKGGFg4hh +Pnqk0afvPV+BlYsmeU65j9z0bsbgWvhmUeY2NNdE9459YWzwZeYvIkeSh3GzTsWv +JovkWTjqmoRBv82LWj6Yc04u9xMIETYRkHy68iqzv16W6ndZD1VfzdXJNCnkhRVN +mb81CXGhynrRTr7FrZQoSBMMNg/Jrg== +=1qpW -----END PGP SIGNATURE----- diff --git a/content/security/CVE-2026-91858.md b/content/security/CVE-2026-91858.md index 1249940a..3d2c82e4 100644 --- a/content/security/CVE-2026-91858.md +++ b/content/security/CVE-2026-91858.md @@ -1,6 +1,6 @@ --- title: "Apache Camel Security Advisory - CVE-2026-91858" -date: 2026-10-13T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-91858.html draft: false type: security-advisory diff --git a/content/security/CVE-2026-91858.txt.asc b/content/security/CVE-2026-91858.txt.asc index 127e266b..15cc3b1f 100644 --- a/content/security/CVE-2026-91858.txt.asc +++ b/content/security/CVE-2026-91858.txt.asc @@ -3,7 +3,7 @@ Hash: SHA512 - --- title: "Apache Camel Security Advisory - CVE-2026-91858" -date: 2026-10-13T10:00:00+02:00 +date: 2026-10-15T10:00:00+02:00 url: /security/CVE-2026-91858.html draft: false type: security-advisory @@ -26,12 +26,12 @@ FopProducer now configures the TransformerFactory it creates with XMLConstants.A The issue is classified as CWE-611 (Improper Restriction of XML External Entity Reference). The camel-4.14.x line reached end of life before this fix and does not receive it; deployments on 4.14.x should move to 4.18.5 or later. -----BEGIN PGP SIGNATURE----- -iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrOFGYACgkQ406fOAL/ -QQDTDQgAvDLVd81XFUEeMVrjEgMVmQRpKUuikMpTWF44mcuEV6YqLV9r/duD5GNV -7RRfLIbLjbpOtoJwW1UnOD0I9aZ90K2mecbluQyOiOt7hIgqT+CdQA6gWLpsgqYy -J2eplJoKszyUAoc1PPETnfreb3XGWAWOt4NGi44YmXt8fxT3CkfWUmV5akLSBu/O -ncw3Z9cXngSsjyq32cGpCkMk31xj11fJyaEfrG1F4vkmjD9IiNbiM7/qPu8Ph7uE -qul2jFp9GjsnBzBnKjGk1Di+/zX6h5VWLfqX7Lps7XJQ6ktY2ZDnWHmcYTPGqOGW -ZWIRgfa0BskHqjTjVcApSQntlXdfHw== -=0mlW +iQEzBAEBCgAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmrQ8ykACgkQ406fOAL/ +QQCrjwf8DFMoBv3OvuRVGg59wJ5gW5+4O9XGXjoz+Zy1V0m7/NFKAZzbxYtWoOFO +2JRSNY23AzSvYyrF061UFpxu7XlyFWSNRAcwqDv8tXK3W8C/NFJT2ICqxoQe4M0J +77sdWsO1s2cN7Jwtuu9kTs3RGhKXOfMSuGBdCcVo1jMrnmXNrLZwyC2XH0OJumk9 +DHq2F60HOHeIBjEx7hU5ILA96nJlaaECKkWfsKtW/RkHZ/Dbw5t/fkWYv8YrUboH +1LSeQIbRvVT52cW5OYnTBDg/5I8V6Dxoiky3KgclSxh6JeFfyGMryraWRqNxxhwi +6VvW3+yd96QmW8Njj7dgnVjHb1Qpvg== +=VVcj -----END PGP SIGNATURE-----
