RHBA-2024:0867 - Bug Fix Advisory

Topic

This is the initial release of JBoss EAP XP 4.0.2 OpenShift container images based on JBoss EAP 7.4. See the release notes for JBoss EAP 7.4.15 at https://access.redhat.com/articles/7037429

These are multi-architecture images and support the x86_64, s390x, and ppc64le architectures.

Description

These images can be used with OpenShift Container Platform 4.14, 4.13, 4.12 and 4.11.

Solution

For details on how to apply this update, refer to the Using JBoss EAP XP 4 document: https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/using_jboss_eap_xp_4.0.0/index

Affected Products

• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64

Fixes

• CLOUD-4219 - EAP XP 4.0.2 OpenShift Image (based on 7.4.15)

CVEs

• CVE-2021-35937
• CVE-2021-35938
• CVE-2021-35939
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-5678
• CVE-2023-7104
• CVE-2023-27043
• CVE-2023-39615
• CVE-2023-43804
• CVE-2023-45803
• CVE-2023-48795
• CVE-2024-0553

References

• https://access.redhat.com/articles/7037429
• https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/red_hat_jboss_eap_xp_4.0.0_release_notes/
• https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html/jboss_eap_xp_4.0_upgrade_and_migration_guide/index
• https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/using_jboss_eap_xp_4.0.0/index