This advisory covers a patch release for Red Hat Build of Apache Camel 4.10.7 for Spring Boot that fixes five distinct security vulnerabilities: CVE-2025-41248 (Spring Security authorization bypass), CVE-2025-41249 (Spring Framework annotation detection vulnerability), CVE-2025-4949 (XXE vulnerability in Eclipse JGit), CVE-2025-58056 (HTTP request smuggling in Netty due to incorrect parsing of chunk extensions), and CVE-2025-59952 (XML tag value substitution vulnerability in minio-java client). The update is classified as important by Red Hat Product Security and addresses these issues by applying patches to the affected components.

The vulnerabilities fixed include an authorization bypass that could allow unauthorized access, annotation detection flaws that may affect application behavior, an XXE vulnerability that could lead to XML-based attacks, HTTP request smuggling that can disrupt HTTP traffic handling, and XML tag value substitution that may allow malicious XML payload manipulation. These issues collectively pose a high security risk to applications using the affected components if left unpatched.

A patch release for Red Hat Build of Apache Camel 4.10.7 for Spring Boot is available and should be applied. Before applying this update, ensure all previously released relevant errata are installed. Follow Red Hat's official guidance on applying updates at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying this official patch.