RHSA-2025:4550
Vulnerability Summary
Timeline
Description
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update
CVSS Metrics
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- redhat•eap7-apache-commons-io
< 0:2.16.1-1.redhat_00001.1.el9eap
- redhat•eap7-hal-console
< 0:3.3.26-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-common-api
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-common-impl
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-common-spi
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-core-api
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-core-impl
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-deployers-common
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-jdbc
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-ironjacamar-validator
< 0:1.5.19-1.Final_redhat_00001.1.el9eap
- redhat•eap7-jboss-remoting
< 0:5.0.31-1.Final_redhat_00001.1.el9eap
- redhat•eap7-jboss-server-migration
< 0:1.10.0-41.Final_redhat_00041.1.el9eap
- redhat•eap7-jboss-server-migration-cli
< 0:1.10.0-41.Final_redhat_00041.1.el9eap
- redhat•eap7-jboss-server-migration-core
< 0:1.10.0-41.Final_redhat_00041.1.el9eap
- redhat•eap7-weld-core
< 0:3.1.11-1.Final_redhat_00001.1.el9eap
- redhat•eap7-weld-core-impl
< 0:3.1.11-1.Final_redhat_00001.1.el9eap
- redhat•eap7-weld-core-jsf
< 0:3.1.11-1.Final_redhat_00001.1.el9eap
- redhat•eap7-weld-ejb
< 0:3.1.11-1.Final_redhat_00001.1.el9eap
- redhat•eap7-weld-jta
< 0:3.1.11-1.Final_redhat_00001.1.el9eap
- redhat•eap7-weld-probe-core
< 0:3.1.11-1.Final_redhat_00001.1.el9eap
- redhat•eap7-weld-web
< 0:3.1.11-1.Final_redhat_00001.1.el9eap
- redhat•eap7-wildfly
< 0:7.4.22-2.GA_redhat_00001.1.el9eap
- redhat•eap7-wildfly-elytron
< 0:1.15.25-1.Final_redhat_00001.1.el9eap
- redhat•eap7-wildfly-elytron-tool
< 0:1.15.25-1.Final_redhat_00001.1.el9eap
- redhat•eap7-wildfly-java-jdk11
< 0:7.4.22-2.GA_redhat_00001.1.el9eap
- redhat•eap7-wildfly-java-jdk17
< 0:7.4.22-2.GA_redhat_00001.1.el9eap
- redhat•eap7-wildfly-java-jdk8
< 0:7.4.22-2.GA_redhat_00001.1.el9eap
- redhat•eap7-wildfly-javadocs
< 0:7.4.22-2.GA_redhat_00001.1.el9eap
- redhat•eap7-wildfly-modules
< 0:7.4.22-2.GA_redhat_00001.1.el9eap
References (32)
- https://access.redhat.com/errata/RHSA-2025:4550
- https://access.redhat.com/security/updates/classification/#important
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
- https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
- https://bugzilla.redhat.com/show_bug.cgi?id=2325538
- https://bugzilla.redhat.com/show_bug.cgi?id=2337620
- https://bugzilla.redhat.com/show_bug.cgi?id=2344787
- https://bugzilla.redhat.com/show_bug.cgi?id=2344788
- https://issues.redhat.com/browse/JBEAP-28786
- https://issues.redhat.com/browse/JBEAP-28810
- https://issues.redhat.com/browse/JBEAP-28843
- https://issues.redhat.com/browse/JBEAP-28989
- https://issues.redhat.com/browse/JBEAP-29003
- https://issues.redhat.com/browse/JBEAP-29311
- https://issues.redhat.com/browse/JBEAP-29488
- https://issues.redhat.com/browse/JBEAP-29539
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4550.json
- https://access.redhat.com/security/cve/CVE-2024-47535
- https://www.cve.org/CVERecord?id=CVE-2024-47535
- https://nvd.nist.gov/vuln/detail/CVE-2024-47535
- https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
- https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
- https://access.redhat.com/security/cve/CVE-2025-24970
- https://www.cve.org/CVERecord?id=CVE-2025-24970
- https://nvd.nist.gov/vuln/detail/CVE-2025-24970
- https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
- https://github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
- https://access.redhat.com/security/cve/CVE-2025-25193
- https://www.cve.org/CVERecord?id=CVE-2025-25193
- https://nvd.nist.gov/vuln/detail/CVE-2025-25193
- https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386
- https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx