RHSA-2021:2047MediumCVSS 6.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.7 security update on RHEL 7

Published
May 19, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2020-13936 →CVE-2021-21290 →CVE-2021-21295 →

📋 Description

CVE-2020-13936 — velocity: arbitrary code execution when attacker is able to modify templates CVE-2021-21290 — netty: Information disclosure via the local system temporary directory CVE-2021-21295 — netty: possible request smuggling in HTTP/2 due missing validation

🎯 Affected products121

  • Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-artemis-wildfly-integration-0:1.0.4-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-artemis-wildfly-integration-0:1.0.4-1.redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-bouncycastle-0:1.68.0-2.redhat_00005.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-bouncycastle-0:1.68.0-2.redhat_00005.1.el7eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-bouncycastle-mail-0:1.68.0-2.redhat_00005.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-bouncycastle-pkix-0:1.68.0-2.redhat_00005.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-bouncycastle-prov-0:1.68.0-2.redhat_00005.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-hal-console-0:3.2.14-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-hal-console-0:3.2.14-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-0:9.4.22-3.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-cachestore-jdbc-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-cachestore-remote-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-client-hotrod-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-commons-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-core-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-hibernate-cache-commons-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-hibernate-cache-spi-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-infinispan-hibernate-cache-v53-0:9.4.22-3.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-0:1.4.30-1.Final_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-common-api-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-common-impl-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-common-spi-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-core-api-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-core-impl-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-deployers-common-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-jdbc-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • eap7-ironjacamar-validator-0:1.4.30-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 7 Server
  • +91 more not shown

✅ Remediation

Before applying this update, ensure all previously released errata relevant to your system have been applied. For details about how to apply this update, see: https://access.redhat.com/articles/11258

🔗 References (30)