When is the planned due date for 4.5.1 Milestone?

[divyavenkat17]

CVE-2025-24970 io.netty:netty-handler vulnerable in 4.5.0 and while we are estimating KRaft to move to 0.46.0, it would be great to have the fix backported to 0.45.x .

[ppatierno]

The current release-0.45.x branch already contains the Netty 4.1.118.Final which fixes the reported CVE. It's just a matter of releasing Strimzi 0.45.1.
We running latest tests about integrating Kafka 3.9.1 before planning such a release. It should come within 2-3 weeks.

[divyavenkat17]

@ppatierno Thanks for the update. How long do you plan to keep maintaining security hotfixes for 0.45.x?

[ppatierno]

The plan was kind of end of the year. After that we won't have any new 0.45.x patch release. People need to migrate to KRaft soon and the moving to 0.46.0.