RHSA-2021:4676MediumCVSS 7.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 7

Published
November 15, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (5)

CVE-2021-3717 →CVE-2021-20289 →CVE-2021-30129 →CVE-2021-37714 →CVE-2021-3629 →

📋 Description

CVE-2021-3629 — undertow: potential security issue in flow control over HTTP/2 may lead to DOS CVE-2021-3717 — wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users CVE-2021-20289 — resteasy: Error message exposes endpoint class information CVE-2021-30129 — mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server CVE-2021-37714 — jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck

🎯 Affected products104

  • Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-0:2.16.0-5.redhat_00032.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-cli-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-commons-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-core-client-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-dto-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-hornetq-protocol-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-hqclient-protocol-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-jdbc-store-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-jms-client-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-jms-server-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-journal-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-ra-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-selector-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-server-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-service-extensions-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-activemq-artemis-tools-0:2.16.0-5.redhat_00032.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-apache-sshd-0:2.7.0-1.redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-apache-sshd-0:2.7.0-1.redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-byte-buddy-0:1.11.12-2.redhat_00002.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-byte-buddy-0:1.11.12-2.redhat_00002.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-eclipse-jgit-0:5.13.0.202109080827-1.r_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-eclipse-jgit-0:5.13.0.202109080827-1.r_redhat_00001.1.el7eap.src as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • eap7-hal-console-0:3.3.8-1.Final_redhat_00001.1.el7eap.noarch as a component of Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • +74 more not shown

✅ Remediation

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (30)