RHSA-2021:4677: Moderate: Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 8
Published Nov 15, 2021
·Updated
Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.<br>This release of Red Hat JBoss Enterprise Application Platform 7.4.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.1, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.2 Release Notes for information about the most significant bug fixes and enhancements included in this release.<br>Security Fix(es):<br><li> undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)</li> <li> wildfly: incorrect JBOSSLOCALUSER challenge location may lead to giving access to all the local users (CVE-2021-3717)</li> <li> mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server (CVE-2021-30129)</li> <li> jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)</li> <li> resteasy: Error message exposes endpoint class information (CVE-2021-20289)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
80 affected componentsFixes available
redhat/eap7-activemq-artemis<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-apache-cxf<3.3.12-1.redhat_00001.1.el8ea
3.3.12-1.redhat_00001.1.el8ea
redhat/eap7-apache-sshd<2.7.0-1.redhat_00001.1.el8ea
2.7.0-1.redhat_00001.1.el8ea
redhat/eap7-byte-buddy<1.11.12-2.redhat_00002.1.el8ea
1.11.12-2.redhat_00002.1.el8ea
redhat/eap7-eclipse-jgit<5.13.0.202109080827-1.r_redhat_00001.1.el8ea
5.13.0.202109080827-1.r_redhat_00001.1.el8ea
redhat/eap7-hal-console<3.3.8-1.Final_redhat_00001.1.el8ea
3.3.8-1.Final_redhat_00001.1.el8ea
redhat/eap7-hibernate<5.3.23-2.Final_redhat_00001.1.el8ea
5.3.23-2.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-jakarta-el<3.0.3-3.redhat_00007.1.el8ea
3.0.3-3.redhat_00007.1.el8ea
redhat/eap7-javassist<3.27.0-2.GA_redhat_00001.1.el8ea
3.27.0-2.GA_redhat_00001.1.el8ea
redhat/eap7-jboss-ejb-client<4.0.43-1.Final_redhat_00001.1.el8ea
4.0.43-1.Final_redhat_00001.1.el8ea
redhat/eap7-jboss-invocation<1.6.3-1.Final_redhat_00001.1.el8ea
1.6.3-1.Final_redhat_00001.1.el8ea
redhat/eap7-jboss-modules<1.12.0-2.Final_redhat_00001.1.el8ea
1.12.0-2.Final_redhat_00001.1.el8ea
redhat/eap7-jboss-server-migration<1.10.0-11.Final_redhat_00010.1.el8ea
1.10.0-11.Final_redhat_00010.1.el8ea
redhat/eap7-jsoup<1.14.2-1.redhat_00002.1.el8ea
1.14.2-1.redhat_00002.1.el8ea
redhat/eap7-resteasy<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-undertow<2.2.12-2.Final_redhat_00001.1.el8ea
2.2.12-2.Final_redhat_00001.1.el8ea
redhat/eap7-wildfly<7.4.2-2.GA_redhat_00002.1.el8ea
7.4.2-2.GA_redhat_00002.1.el8ea
redhat/eap7-wildfly-elytron<1.15.6-1.Final_redhat_00001.1.el8ea
1.15.6-1.Final_redhat_00001.1.el8ea
redhat/eap7-wss4j<2.2.7-1.redhat_00001.1.el8ea
2.2.7-1.redhat_00001.1.el8ea
redhat/eap7-xml-security<2.1.7-1.redhat_00001.1.el8ea
2.1.7-1.redhat_00001.1.el8ea
redhat/eap7-activemq-artemis-cli<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-commons<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-core-client<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-dto<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-hornetq-protocol<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-hqclient-protocol<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-jdbc-store<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-jms-client<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-jms-server<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-journal<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-ra<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-selector<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-server<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-service-extensions<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-activemq-artemis-tools<2.16.0-5.redhat_00032.1.el8ea
2.16.0-5.redhat_00032.1.el8ea
redhat/eap7-apache-cxf-rt<3.3.12-1.redhat_00001.1.el8ea
3.3.12-1.redhat_00001.1.el8ea
redhat/eap7-apache-cxf-services<3.3.12-1.redhat_00001.1.el8ea
3.3.12-1.redhat_00001.1.el8ea
redhat/eap7-apache-cxf-tools<3.3.12-1.redhat_00001.1.el8ea
3.3.12-1.redhat_00001.1.el8ea
redhat/eap7-hibernate-core<5.3.23-2.Final_redhat_00001.1.el8ea
5.3.23-2.Final_redhat_00001.1.el8ea
redhat/eap7-hibernate-entitymanager<5.3.23-2.Final_redhat_00001.1.el8ea
5.3.23-2.Final_redhat_00001.1.el8ea
redhat/eap7-hibernate-envers<5.3.23-2.Final_redhat_00001.1.el8ea
5.3.23-2.Final_redhat_00001.1.el8ea
redhat/eap7-hibernate-java8<5.3.23-2.Final_redhat_00001.1.el8ea
5.3.23-2.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-common-api<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-common-impl<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-common-spi<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-core-api<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-core-impl<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-deployers-common<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-jdbc<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-ironjacamar-validator<1.5.2-1.Final_redhat_00001.1.el8ea
1.5.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-jboss-server-migration-cli<1.10.0-11.Final_redhat_00010.1.el8ea
1.10.0-11.Final_redhat_00010.1.el8ea
redhat/eap7-jboss-server-migration-core<1.10.0-11.Final_redhat_00010.1.el8ea
1.10.0-11.Final_redhat_00010.1.el8ea
redhat/eap7-resteasy-atom-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-cdi<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-client<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-crypto<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-jackson-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-jackson2-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-jaxb-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-jaxrs<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-jettison-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-jose-jwt<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-jsapi<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-json-binding-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-json-p-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-multipart-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-rxjava2<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-spring<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-validator-provider<11-3.15.2-1.Final_redhat_00001.1.el8ea
11-3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-resteasy-yaml-provider<3.15.2-1.Final_redhat_00001.1.el8ea
3.15.2-1.Final_redhat_00001.1.el8ea
redhat/eap7-wildfly-elytron-tool<1.15.6-1.Final_redhat_00001.1.el8ea
1.15.6-1.Final_redhat_00001.1.el8ea
redhat/eap7-wildfly-javadocs<7.4.2-2.GA_redhat_00002.1.el8ea
7.4.2-2.GA_redhat_00002.1.el8ea
redhat/eap7-wildfly-modules<7.4.2-2.GA_redhat_00002.1.el8ea
7.4.2-2.GA_redhat_00002.1.el8ea
redhat/eap7-wss4j-bindings<2.2.7-1.redhat_00001.1.el8ea
2.2.7-1.redhat_00001.1.el8ea
redhat/eap7-wss4j-policy<2.2.7-1.redhat_00001.1.el8ea
2.2.7-1.redhat_00001.1.el8ea
redhat/eap7-wss4j-ws-security-common<2.2.7-1.redhat_00001.1.el8ea
2.2.7-1.redhat_00001.1.el8ea
redhat/eap7-wss4j-ws-security-dom<2.2.7-1.redhat_00001.1.el8ea
2.2.7-1.redhat_00001.1.el8ea
redhat/eap7-wss4j-ws-security-policy-stax<2.2.7-1.redhat_00001.1.el8ea
2.2.7-1.redhat_00001.1.el8ea
redhat/eap7-wss4j-ws-security-stax<2.2.7-1.redhat_00001.1.el8ea
2.2.7-1.redhat_00001.1.el8ea
Remediation
Event History
Jun 20, 2024
Advisory Published
via Red Hat·01:34 AM
Frequently Asked Questions
1
What is the severity of RHSA-2021:4677?
The severity of RHSA-2021:4677 is categorized as important.
2
How do I fix RHSA-2021:4677?
To fix RHSA-2021:4677, you should upgrade the affected packages to the versions specified in the advisory.
3
Which packages are affected by RHSA-2021:4677?
RHSA-2021:4677 affects multiple packages within the Red Hat JBoss Enterprise Application Platform 7 ecosystem.
4
Is updating to the latest version necessary for RHSA-2021:4677?
Yes, updating to the latest version is necessary to address the vulnerabilities identified in RHSA-2021:4677.
5
When was RHSA-2021:4677 released?
RHSA-2021:4677 was released on December 8, 2021.