This advisory covers a security update in Red Hat build of Quarkus 3.15.4 that fixes CVE-2025-2240, a vulnerability in the io.smallrye/smallrye-fault-tolerance-core component (SmallRye Fault Tolerance). The update is classified as important by Red Hat Product Security. The advisory does not provide a CVSS score or detailed technical exploit information. The update also includes various other fixes and upgrades unrelated to the security issue. Users are advised to apply this update following standard Red Hat update procedures.

The vulnerability CVE-2025-2240 affects the SmallRye Fault Tolerance component within Red Hat build of Quarkus. The security impact is rated as important by Red Hat, indicating a significant potential risk if unpatched. No known exploits in the wild have been reported, and no detailed impact scenarios are provided in the advisory.

A security update is available in Red Hat build of Quarkus version 3.15.4 that addresses CVE-2025-2240. Users should apply this update after ensuring all previously released relevant errata have been applied. Refer to Red Hat's official update documentation for detailed instructions: https://access.redhat.com/articles/11258. No additional mitigation steps are specified or required beyond applying the official update.