RHSA-2021:2858MediumCVSS 5.3
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.0 update
🔗 CVE IDs covered (1)
📋 Description
CVE-2020-25633 — resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling
🎯 Affected products200
- Red Hat JBoss Enterprise Application Platform
- @babel.code-frame-7.0.0 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.core-7.4.5 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.generator-7.4.4 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.helper-function-name-7.1.0 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.helper-get-function-arity-7.0.0 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.helper-split-export-declaration-7.4.4 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.helpers-7.4.4 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.highlight-7.0.0 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.parser-7.4.5 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.template-7.4.4 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.traverse-7.4.5 as a component of Red Hat JBoss Enterprise Application Platform
- @babel.types-7.4.4 as a component of Red Hat JBoss Enterprise Application Platform
- @mrmlnc.readdir-enhanced-2.2.1 as a component of Red Hat JBoss Enterprise Application Platform
- @nodelib.fs.stat-1.1.3 as a component of Red Hat JBoss Enterprise Application Platform
- @types.c3-0.6.0 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-4.13.0 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-array-1.2.1 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-axis-1.0.10 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-brush-1.0.8 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-chord-1.0.7 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-collection-1.0.7 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-color-1.2.1 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-dispatch-1.0.6 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-drag-1.2.1 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-dsv-1.0.33 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-ease-1.0.7 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-force-1.1.1 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-format-1.3.0 as a component of Red Hat JBoss Enterprise Application Platform
- @types.d3-geo-1.10.3 as a component of Red Hat JBoss Enterprise Application Platform
- +170 more not shown
✅ Remediation
Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The References section of this erratum contains a download link (you must log in to download the update). The JBoss server process must be restarted for the update to take effect.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2021:2858
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=7.4
- externalhttps://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
- externalhttps://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1879042
- externalhttps://issues.redhat.com/browse/JBEAP-21120
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2858.json