Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.3 for Spring Boot patch release.
Red Hat build of Apache Camel 4.10.3 for Spring Boot patch release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Security Fix(es): * jetty-server: Jetty: Gzip Request Body Buffer Corruption (CVE-2024-13009) * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734) * postgresql: pgjdbc insecure authentication in channel binding (CVE-2025-49146)
AI Analysis
Technical Summary
This advisory covers a patch release for Red Hat build of Apache Camel 4.10.3 for Spring Boot that addresses three security vulnerabilities: CVE-2024-13009 in jetty-server involving gzip request body buffer corruption, CVE-2025-48734 in Apache Commons BeanUtils related to PropertyUtilsBean not suppressing an enum's declaredClass property by default, and CVE-2025-49146 in PostgreSQL JDBC concerning insecure authentication in channel binding. The update is intended to fix these issues and is classified as important by Red Hat. No CVSS scores are provided in the advisory, but the severity is indicated as high.
Potential Impact
The vulnerabilities fixed include a buffer corruption issue that could lead to memory corruption or denial of service (CVE-2024-13009), a property suppression flaw that may allow unintended access or manipulation of enum properties (CVE-2025-48734), and an insecure authentication mechanism in PostgreSQL JDBC channel binding that could weaken authentication security (CVE-2025-49146). These issues collectively pose a high security risk if left unpatched.
Mitigation Recommendations
A patch release for Red Hat build of Apache Camel 4.10.3 for Spring Boot is available and should be applied. Red Hat advises ensuring all previously released errata relevant to the system have been applied before updating. Detailed update instructions are available at https://access.redhat.com/articles/11258. No indication of no-action-required or prior mitigation is stated, so applying this official patch is the recommended remediation.
Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.3 for Spring Boot patch release.
Description
Red Hat build of Apache Camel 4.10.3 for Spring Boot patch release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Security Fix(es): * jetty-server: Jetty: Gzip Request Body Buffer Corruption (CVE-2024-13009) * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734) * postgresql: pgjdbc insecure authentication in channel binding (CVE-2025-49146)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers a patch release for Red Hat build of Apache Camel 4.10.3 for Spring Boot that addresses three security vulnerabilities: CVE-2024-13009 in jetty-server involving gzip request body buffer corruption, CVE-2025-48734 in Apache Commons BeanUtils related to PropertyUtilsBean not suppressing an enum's declaredClass property by default, and CVE-2025-49146 in PostgreSQL JDBC concerning insecure authentication in channel binding. The update is intended to fix these issues and is classified as important by Red Hat. No CVSS scores are provided in the advisory, but the severity is indicated as high.
Potential Impact
The vulnerabilities fixed include a buffer corruption issue that could lead to memory corruption or denial of service (CVE-2024-13009), a property suppression flaw that may allow unintended access or manipulation of enum properties (CVE-2025-48734), and an insecure authentication mechanism in PostgreSQL JDBC channel binding that could weaken authentication security (CVE-2025-49146). These issues collectively pose a high security risk if left unpatched.
Mitigation Recommendations
A patch release for Red Hat build of Apache Camel 4.10.3 for Spring Boot is available and should be applied. Red Hat advises ensuring all previously released errata relevant to the system have been applied before updating. Detailed update instructions are available at https://access.redhat.com/articles/11258. No indication of no-action-required or prior mitigation is stated, so applying this official patch is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:9697
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-48734","CVE-2025-49146"]
Threat ID: 6a294d7a8dd33fbd853abccb
Added to database: 06/10/2026, 11:41:46 UTC
Last enriched: 07/30/2026, 09:28:24 UTC
Last updated: 09/10/2026, 19:36:47 UTC
Views: 84
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.