Red Hat Security Advisory

RHSA-2025:8258

Red Hat build of Quarkus 3.20.1 release

Released 2025-06-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Quarkus 3.20.1.redhat io.netty.netty-handler-4.1.119.Final-redhat-00005.jar

Fixes 1 record

TI-2025-18650 CVE-2025-24970 · GHSA-4g8c-wm8x-jfhw

SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

HIGH 72

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02192 Published 2025-02-10 Partial fix · 4.1.118.Final CWE-20