Upgrade Netty to 4.1.78.Final

[dhoffer]

Description

We are getting security scan failures with the current Netty 4.1.74.Final, I see there is a 4.1.78.Final available. I have not verified they are fixed in 4.1.78.Final but seems Quarkus should always move to the latest service pack version to pickup bug fixes.

Implementation ideas

No response

[geoand]

We do plan to do this soon, but it needs to be tested with Vert.x

[geoand]

cc @cescoffier

[cescoffier]

We won't bump for now. We have found a graalvm bug that prevent native compilation.

[abstractj]

@cescoffier @geoand @dhoffer I was about to report a similar issue while reviewing the issues for Keycloak, when I found this ticket. The issue should be considered as low-impact considering that only Java 6, or below are impacted.

More details here: https://security.snyk.io/vuln/SNYK-JAVA-IONETTY-2812456

[cescoffier]

Yes, I am aware of the CVE, but let's say that Java 6 is slightly out of scope :-).

[geoand]

Closed via #26294