Skip to content
OpenAdvisories
Medium RHSA-2021:2694 2 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 8 security update

Published Sep 20, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 64

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-elytron-web 0:1.6.3-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hal-console 0:3.2.15-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate 0:5.3.20-3.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-core 0:5.3.20-3.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-entitymanager 0:5.3.20-3.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-envers 0:5.3.20-3.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-java8 0:5.3.20-3.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-cachestore-jdbc 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-cachestore-remote 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-client-hotrod 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-commons 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-core 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-hibernate-cache-commons 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-hibernate-cache-spi 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-infinispan-hibernate-cache-v53 0:9.4.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-common-api 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-common-impl 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-common-spi 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-core-api 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-core-impl 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-deployers-common 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-jdbc 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ironjacamar-validator 0:1.4.33-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jberet 0:1.3.8-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jberet-core 0:1.3.8-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-remoting 0:5.0.23-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-cli 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-core 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap6.4 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap6.4-to-eap7.3 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.0 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.1 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.2 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.2-to-eap7.3 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.3-server 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly10.0 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly10.1 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly11.0 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly12.0 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly13.0-server 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly14.0-server 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly15.0-server 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly16.0-server 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly17.0-server 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly18.0-server 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly8.2 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly9.0 0:1.7.2-7.Final_redhat_00008.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-netty 0:4.1.63-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-netty-all 0:4.1.63-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-undertow 0:2.0.38-1.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-undertow-server 0:1.6.3-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly 0:7.3.8-1.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-elytron 0:1.10.13-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-elytron-tool 0:1.10.13-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-http-client 0:1.0.28-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-http-client-common 0:1.0.28-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-http-ejb-client 0:1.0.28-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-http-naming-client 0:1.0.28-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-http-transaction-client 0:1.0.28-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-javadocs 0:7.3.8-1.GA_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-modules 0:7.3.8-1.GA_redhat_00001.1.el8eap

Vulnerabilities 2

  • Medium 5.9
    CVE-2021-21409

    Possible request smuggling in HTTP/2 due missing validation of content-length

    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that…

    netty netty netty netty Debian Ubuntu Maven
  • Low 3.8
    CVE-2021-3536

    Cross-site Scripting in Wildfly

    A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.

    org.wildfly:wildfly-parent Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1944888
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1948001
  • article
    https://issues.redhat.com/browse/JBEAP-20264
  • article
    https://issues.redhat.com/browse/JBEAP-20503
  • article
    https://issues.redhat.com/browse/JBEAP-20623
  • article
    https://issues.redhat.com/browse/JBEAP-21180
  • article
    https://issues.redhat.com/browse/JBEAP-21406
  • article
    https://issues.redhat.com/browse/JBEAP-21421
  • article
    https://issues.redhat.com/browse/JBEAP-21434
  • article
    https://issues.redhat.com/browse/JBEAP-21435
  • article
    https://issues.redhat.com/browse/JBEAP-21437
  • article
    https://issues.redhat.com/browse/JBEAP-21441
  • article
    https://issues.redhat.com/browse/JBEAP-21443
  • article
    https://issues.redhat.com/browse/JBEAP-21444
  • article
    https://issues.redhat.com/browse/JBEAP-21567
  • article
    https://issues.redhat.com/browse/JBEAP-21582
  • article
    https://issues.redhat.com/browse/JBEAP-21739
  • article
    https://issues.redhat.com/browse/JBEAP-21977
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2694.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3536
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3536
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3536
  • report
    https://access.redhat.com/security/cve/CVE-2021-21409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-21409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-21409
  • article
    https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32