Red Hat Security Advisory

RHSA-2024:2106

Red Hat build of Quarkus 3.8.4 release

Released 2024-05-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat build of Quarkus 3.8.4.redhat io.netty.netty-codec-http-4.1.108.Final-redhat-00001.jar, io.quarkus.quarkus-core-3.8.4.redhat-00002.jar

Fixes 2 records

TI-2024-19207 CVE-2024-29025 · GHSA-5jpm-x58v-624v

Netty HttpPostRequestDecoder can OOM

MEDIUM 63

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0138 Published 2024-03-25 Partial fix · 4.1.108.Final CWE-770

TI-2024-02514 CVE-2024-2700 · GHSA-f8h5-v2vg-46rr

Quarkus-core: leak of local configuration properties into quarkus applications

LOW 31

A vulnerability was found in the quarkus-core component.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00309 Published 2024-04-04 Partial fix · 3.2.12.Final-redhat-00001, 3.8.4.redhat-00002 +8 CWE-526