Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.0 security update

CVE-2021-2471 — mysql-connector-java: unauthorized access to critical CVE-2021-3642 — wildfly-elytron: possible timing attack in ScramServer CVE-2021-3644 — wildfly-core: Invalid Sensitivity Classification of Vault Expression CVE-2021-3717 — wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users CVE-2021-22569 — protobuf-java: potential DoS in the parsing procedure for binary data CVE-2021-36373 — ant: excessive memory allocation when reading a specially crafted TAR archive CVE-2021-37136 — netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37137 — netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way CVE-2021-37714 — jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck CVE-2021-43797 — netty: control chars in header names may lead to HTTP request smuggling CVE-2022-22950 — spring-expression: Denial of service via specially crafted SpEL expression CVE-2022-25647 — com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson