Red Hat Security Advisory: Streams for Apache Kafka 2.9.0 release and security update

CVE-2023-52428 — nimbus-jose-jwt: large JWE p2c header value causes Denial of Service CVE-2024-8184 — org.eclipse.jetty:jetty-server: jetty: Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks CVE-2024-9355 — golang-fips: Golang FIPS zeroed buffer CVE-2024-24791 — net/http: Denial of service due to improper 100-continue handling in net/http CVE-2024-31141 — kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider CVE-2024-47535 — netty: Denial of Service attack on windows app using Netty CVE-2024-47554 — apache-commons-io: Possible denial of service attack on untrusted input to XmlStreamReader