[
https://issues.apache.org/jira/browse/CASSANDRA-20455?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Vanessa Haro updated CASSANDRA-20455:
-------------------------------------
Bug Category: Parent values: Security(12985)
> [CVE-2025-24970 netty-handler] bump netty to 4.1.119.Final or greater
> ----------------------------------------------------------------------
>
> Key: CASSANDRA-20455
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20455
> Project: Apache Cassandra
> Issue Type: Bug
> Components: Dependencies
> Reporter: Vanessa Haro
> Priority: Normal
>
> [CVE-2025-24970 netty-handler] bump netty to 4.1.119.Final or greater
> netty 4.1.117 and below has
> [CVE-2025-24970|https://nvd.nist.gov/vuln/detail/CVE-2025-24970] which is
> fixed in 4.1.118+.
> Impact: When a special crafted packet is received via SslHandler it doesn't
> correctly handle validation of such a packet in all cases which can lead to a
> native crash.
>
> See advisory:
> * [https://github.com/advisories/GHSA-4g8c-wm8x-jfhw]
> * [https://github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
