This security advisory for Red Hat JBoss Enterprise Application Platform 7.4.22 addresses several vulnerabilities: CVE-2024-47535 and CVE-2025-25193 describe denial of service attacks on Windows applications using Netty; CVE-2025-24970 involves improper packet validation in io.netty/netty-handler's SslHandler that can lead to native crashes when using native SSLEngine; and CVE-2025-23367 concerns improper role-based access control permissions in Wildfly server. The advisory provides updated packages that fix these issues and recommends applying the update after ensuring all prior errata are applied and backing up existing installations.

The vulnerabilities can cause denial of service conditions on affected systems, potentially disrupting service availability. The improper RBAC permission flaw may allow unauthorized access to certain operations within Wildfly. The SslHandler packet validation issue can cause native crashes, potentially leading to service interruptions. Red Hat rates the overall security impact as Important (high). There are no known exploits in the wild at this time.

An official security update is available in Red Hat JBoss Enterprise Application Platform 7.4.22, which fixes the identified vulnerabilities. Users should apply this update after ensuring all previous errata are applied and backing up their systems, including applications and configurations. The vendor provides detailed instructions for applying the update. No additional mitigation steps are indicated beyond applying the official patch.