RHSA-2025:3467: Important: Red Hat JBoss Enterprise Application Platform 7.4.21 security update

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.Security Fix(es): io.netty/netty: Denial of Service attack on windows app using Netty (CVE-2024-47535) netty-common: Denial of Service attack on windows app using Netty (CVE-2025-25193) io.netty/netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine (CVE-2025-24970) org.wildfly.core/wildfly-server: Wildfly improper RBAC permission (CVE-2025-23367) hornetq-core-client: Arbitrarily overwrite files or access sensitive information Security (CVE-2024-51127) A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat