RHSA-2025:3465

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update

CVSS Metrics

• v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Systems

• redhat•eap7-netty

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-all

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-buffer

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-dns

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-haproxy

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-http

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-http2

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-memcache

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-mqtt

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-redis

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-smtp

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-socks

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-stomp

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-codec-xml

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-common

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-handler

  < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap | < 0:4.1.119-1.Final_redhat_00004.1.el9eap

• redhat•eap7-netty-handler-proxy

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-resolver

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-resolver-dns

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-resolver-dns-classes-macos

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-transport

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-transport-classes-epoll

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-transport-classes-kqueue

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-transport-native-epoll

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-transport-native-epoll-debuginfo

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-transport-native-unix-common

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-netty-transport-sctp

  < 0:4.1.119-1.Final_redhat_00004.1.el9eap | < 0:4.1.119-1.Final_redhat_00004.1.el7eap | < 0:4.1.119-1.Final_redhat_00004.1.el8eap

• redhat•eap7-wildfly

  < 0:7.4.21-3.GA_29548_redhat_00001.1.el9eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el7eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el8eap

• redhat•eap7-wildfly-java-jdk11

  < 0:7.4.21-3.GA_29548_redhat_00001.1.el9eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el7eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el8eap

• redhat•eap7-wildfly-java-jdk17

  < 0:7.4.21-3.GA_29548_redhat_00001.1.el9eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el8eap

• redhat•eap7-wildfly-java-jdk8

  < 0:7.4.21-3.GA_29548_redhat_00001.1.el9eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el7eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el8eap

• redhat•eap7-wildfly-javadocs

  < 0:7.4.21-3.GA_29548_redhat_00001.1.el9eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el7eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el8eap

• redhat•eap7-wildfly-modules

  < 0:7.4.21-3.GA_29548_redhat_00001.1.el9eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el7eap | < 0:7.4.21-3.GA_29548_redhat_00001.1.el8eap

References (28)

• https://access.redhat.com/errata/RHSA-2025:3465
• https://access.redhat.com/security/updates/classification/#important
• https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
• https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
• https://bugzilla.redhat.com/show_bug.cgi?id=2325538
• https://bugzilla.redhat.com/show_bug.cgi?id=2337620
• https://bugzilla.redhat.com/show_bug.cgi?id=2344787
• https://bugzilla.redhat.com/show_bug.cgi?id=2344788
• https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3465.json
• https://access.redhat.com/security/cve/CVE-2024-47535
• https://www.cve.org/CVERecord?id=CVE-2024-47535
• https://nvd.nist.gov/vuln/detail/CVE-2024-47535
• https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
• https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
• https://access.redhat.com/security/cve/CVE-2025-23367
• https://www.cve.org/CVERecord?id=CVE-2025-23367
• https://nvd.nist.gov/vuln/detail/CVE-2025-23367
• https://github.com/advisories/GHSA-qr6x-62gq-4ccp
• https://access.redhat.com/security/cve/CVE-2025-24970
• https://www.cve.org/CVERecord?id=CVE-2025-24970
• https://nvd.nist.gov/vuln/detail/CVE-2025-24970
• https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
• https://github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
• https://access.redhat.com/security/cve/CVE-2025-25193
• https://www.cve.org/CVERecord?id=CVE-2025-25193
• https://nvd.nist.gov/vuln/detail/CVE-2025-25193
• https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386
• https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx