Fixed packages 98
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-artemis-wildfly-integration | 0:1.0.4-1.redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-bouncycastle | 0:1.68.0-2.redhat_00005.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-bouncycastle-mail | 0:1.68.0-2.redhat_00005.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-bouncycastle-pkix | 0:1.68.0-2.redhat_00005.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-bouncycastle-prov | 0:1.68.0-2.redhat_00005.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-hal-console | 0:3.2.14-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-cachestore-jdbc | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-cachestore-remote | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-client-hotrod | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-commons | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-core | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-hibernate-cache-commons | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-hibernate-cache-spi | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-infinispan-hibernate-cache-v53 | 0:9.4.22-3.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-common-api | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-common-impl | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-common-spi | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-core-api | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-core-impl | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-deployers-common | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-jdbc | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-ironjacamar-validator | 0:1.4.30-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-genericjms | 0:2.0.9-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-marshalling | 0:2.0.11-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-marshalling-river | 0:2.0.11-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-cli | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-core | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-eap6.4 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-eap6.4-to-eap7.3 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-eap7.0 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-eap7.1 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-eap7.2 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-eap7.2-to-eap7.3 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-eap7.3-server | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly10.0 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly10.1 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly11.0 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly12.0 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly13.0-server | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly14.0-server | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly15.0-server | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly16.0-server | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly17.0-server | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly18.0-server | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly8.2 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-server-migration-wildfly9.0 | 0:1.7.2-6.Final_redhat_00007.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-weld-3.1-api | 0:3.1.0-6.SP3_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-weld-3.1-api-weld-api | 0:3.1.0-6.SP3_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jboss-weld-3.1-api-weld-spi | 0:3.1.0-6.SP3_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-jgroups-kubernetes | 0:1.0.16-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-mod_cluster | 0:1.4.3-2.Final_redhat_00002.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-netty | 0:4.1.60-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-netty-all | 0:4.1.60-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-atom-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-cdi | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-client | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-client-microprofile | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-crypto | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-jackson-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-jackson2-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-jaxb-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-jaxrs | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-jettison-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-jose-jwt | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-jsapi | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-json-binding-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-json-p-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-multipart-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-rxjava2 | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-spring | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-validator-provider-11 | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-resteasy-yaml-provider | 0:3.11.4-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-undertow | 0:2.0.35-1.SP1_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-velocity | 0:2.3.0-1.redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-velocity-engine-core | 0:2.3.0-1.redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-weld-core | 0:3.1.6-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-weld-core-impl | 0:3.1.6-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-weld-core-jsf | 0:3.1.6-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-weld-ejb | 0:3.1.6-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-weld-jta | 0:3.1.6-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-weld-probe-core | 0:3.1.6-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-weld-web | 0:3.1.6-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly | 0:7.3.7-1.GA_redhat_00002.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-elytron | 0:1.10.12-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-elytron-tool | 0:1.10.12-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-http-client | 0:1.0.26-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-http-client-common | 0:1.0.26-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-http-ejb-client | 0:1.0.26-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-http-naming-client | 0:1.0.26-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-http-transaction-client | 0:1.0.26-1.Final_redhat_00001.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-javadocs | 0:7.3.7-1.GA_redhat_00002.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-wildfly-modules | 0:7.3.7-1.GA_redhat_00002.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-xalan-j2 | 0:2.7.1-36.redhat_00013.1.el6eap |
| Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el6 | eap7-yasson | 0:1.0.9-1.redhat_00001.1.el6eap |
Vulnerabilities 3
-
High 8.8CVE-2020-13936 EPSS 23%
Velocity Sandbox Bypass
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/mod…
-
Medium 6.2
Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an…
-
Medium 5.9CVE-2021-21295 EPSS 19%
Possible request smuggling in HTTP/2 due missing validation
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/
-
article
https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1927028
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1937364
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1937440
-
article
https://issues.redhat.com/browse/JBEAP-20478
-
article
https://issues.redhat.com/browse/JBEAP-20868
-
article
https://issues.redhat.com/browse/JBEAP-20927
-
article
https://issues.redhat.com/browse/JBEAP-20935
-
article
https://issues.redhat.com/browse/JBEAP-20940
-
article
https://issues.redhat.com/browse/JBEAP-21093
-
article
https://issues.redhat.com/browse/JBEAP-21094
-
article
https://issues.redhat.com/browse/JBEAP-21095
-
article
https://issues.redhat.com/browse/JBEAP-21096
-
article
https://issues.redhat.com/browse/JBEAP-21121
-
article
https://issues.redhat.com/browse/JBEAP-21185
-
article
https://issues.redhat.com/browse/JBEAP-21186
-
article
https://issues.redhat.com/browse/JBEAP-21193
-
article
https://issues.redhat.com/browse/JBEAP-21196
-
article
https://issues.redhat.com/browse/JBEAP-21203
-
article
https://issues.redhat.com/browse/JBEAP-21262
-
article
https://issues.redhat.com/browse/JBEAP-21279
-
article
https://issues.redhat.com/browse/JBEAP-21312
-
article
https://issues.redhat.com/browse/JBEAP-21322
-
article
https://issues.redhat.com/browse/JBEAP-21351
-
article
https://issues.redhat.com/browse/JBEAP-21390
-
article
https://issues.redhat.com/browse/JBEAP-21479
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2046.json
-
report
https://access.redhat.com/security/cve/CVE-2020-13936
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-13936
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-13936
-
report
https://access.redhat.com/security/cve/CVE-2021-21290
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-21290
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-21290
-
report
https://access.redhat.com/security/cve/CVE-2021-21295
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-21295
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-21295
-
article
https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj