Red Hat Product Errata RHSA-2021:2692 - Security Advisory
Issued:
2021-07-13
Updated:
2021-07-13

RHSA-2021:2692 - Security Advisory

Synopsis

Moderate: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 6 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.3.8 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.3.7, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.3.8 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • netty: Request smuggling via content-length header (CVE-2021-21409)
  • wildfly: XSS via admin console when creating roles in domain mode (CVE-2021-3536)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.3 for RHEL 6 x86_64

Fixes

  • BZ - 1944888 - CVE-2021-21409 netty: Request smuggling via content-length header
  • BZ - 1948001 - CVE-2021-3536 wildfly: XSS via admin console when creating roles in domain mode
  • JBEAP-21178 - Tracker bug for the EAP 7.3.8 release for RHEL-6
  • JBEAP-20264 - [GSS](7.3.z) ISPN-12787 - Non Transactional Cache needs to be invalidated after commit on JPQL update/delete operation
  • JBEAP-20503 - [GSS](7.3.z) WFCORE-5185 - Update ProviderDefinition to use optimised service loading API
  • JBEAP-20623 - [GSS](7.3.z) Upgrade Hibernate ORM from 5.3.20.Final-redhat-00001 to 5.3.20.SP1-redhat-00001
  • JBEAP-21406 - [GSS](7.3.z) Upgrade Ironjacamar from 1.4.30.Final-redhat-00001 to 1.4.33.Final-redhat-00001
  • JBEAP-21421 - (7.3.z) Upgrade Infinispan from 9.4.22.Final-redhat-00001 to 9.4.23.Final-redhat-00001
  • JBEAP-21434 - (7.3.z) Upgrade wildfly-http-client from 1.0.26.Final-redhat-00001 to 1.0.28.Final-redhat-00001
  • JBEAP-21435 - (7.3.z) Upgrade Elytron from 1.10.12.Final-redhat-00001 to 1.10.13.Final-redhat-00001
  • JBEAP-21437 - (7.3.z) Upgrade netty from 4.1.60.Final to 4.1.63
  • JBEAP-21441 - (7.3.z) Upgrade Undertow from 2.0.35.SP1-redhat-00001 to 2.0.38.SP1-redhat-00001
  • JBEAP-21443 - (7.3.z) Upgrade jberet from 1.3.7.Final-redhat-00001 to 1.3.8.Final-redhat-00001
  • JBEAP-21444 - (7.3.z) Upgrade wf-core from 10.1.20.Final-redhat-00001 to 10.1.21.Final-redhat-00001
  • JBEAP-21567 - [GSS](7.3.z) Upgrade HAL from 3.2.14.Final-redhat-00001 to 3.2.15.Final-redhat-00001
  • JBEAP-21582 - (7.3.z) Upgrade remoting from 5.0.20.SP1-redhat-00001 to 5.0.23.Final-redhat-00001
  • JBEAP-21739 - (7.3.z) Upgrade elytron-web from 1.6.2.Final-redhat-00001 to 1.6.3.Final-redhat-00001
  • JBEAP-21977 - [SET](7.3.z) Update product CP branch github template

JBoss Enterprise Application Platform 7.3 for RHEL 6

SRPM
eap7-elytron-web-1.6.3-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: b99cdceac7fefccc052f6304a42398456b8b99216e29452cab3a0993d5439d67
eap7-hal-console-3.2.15-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 8a264a74ff4993a07b83723a93b18abb7b6877d40887fdb15fd49eb2ffa9e206
eap7-hibernate-5.3.20-3.SP1_redhat_00001.1.el6eap.src.rpm SHA-256: a17222c01ff9971142b8768bab256c7dd3e30b533e4e6507f714e26de2355809
eap7-infinispan-9.4.23-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: e258562b2d01b757f30a9f64eb66ca87d28e9d1a91a15af34104a92dae7ee1c3
eap7-ironjacamar-1.4.33-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 62fc7b46ac659ef8dcfda15812f45eb4136bdea9b8403c2a66c43dcca692ec4f
eap7-jberet-1.3.8-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 994fa68b98d97b1e0e5fcb1015ce56328ebdb6602a3f90db994f188c9bed0637
eap7-jboss-remoting-5.0.23-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: dcb4f6a834e18d2ce10ec9a7e253e81333ba05db5e9413eee2c07dfc478eab68
eap7-jboss-server-migration-1.7.2-7.Final_redhat_00008.1.el6eap.src.rpm SHA-256: 8126b8ef7d5e3adbcbc1ffe6d0262fbd43b6e7d961374fbda32b2763323c0ff6
eap7-netty-4.1.63-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: cd5ba37658015c9da263e102c5565bffd5f3f6e0a18139e1e7e5b41d73350200
eap7-undertow-2.0.38-1.SP1_redhat_00001.1.el6eap.src.rpm SHA-256: a435a9d9681b68709dc0ddb599404193777c2cb880c69cfeb772851099839c73
eap7-wildfly-7.3.8-1.GA_redhat_00001.1.el6eap.src.rpm SHA-256: 5af0bf8534390a151203fe60363047d6885aec135c9225fdb4725d5fac71b9bb
eap7-wildfly-elytron-1.10.13-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: 168b6e659832695813feebf2390acc76b188f7dd923ac858fc77e6f00010074f
eap7-wildfly-http-client-1.0.28-1.Final_redhat_00001.1.el6eap.src.rpm SHA-256: d775e199c1cceb19c25d4b47cac29f4dd86280a36f3abd07f0d6892a67aabe42
x86_64
eap7-hal-console-3.2.15-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5e3c2d2deeccd4a9a524077f526bedc1f861e171c89f0f59beadad573fbcba42
eap7-hibernate-5.3.20-3.SP1_redhat_00001.1.el6eap.noarch.rpm SHA-256: df2d442438717724f58620844179f376b8b919dc2082b4aef07b7f5d442476b9
eap7-hibernate-core-5.3.20-3.SP1_redhat_00001.1.el6eap.noarch.rpm SHA-256: 99023cf2b2e8097ea38151f347d0d0dd6a833949d76dc0d40f95dcbe29050bfa
eap7-hibernate-entitymanager-5.3.20-3.SP1_redhat_00001.1.el6eap.noarch.rpm SHA-256: 43b6c320b364c0e9f4bb20b05db8dfb4e9554792ffbfbf6c0572ebb5ffadb7f0
eap7-hibernate-envers-5.3.20-3.SP1_redhat_00001.1.el6eap.noarch.rpm SHA-256: cdff6930ba930b245379b158df7ef3c8778e7eb3c672aca3f13a1d89e6f91097
eap7-hibernate-java8-5.3.20-3.SP1_redhat_00001.1.el6eap.noarch.rpm SHA-256: a12db9eaf166051efdff6d01041f6b009ba7964025073d4a6d33dc3d153415b2
eap7-infinispan-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 120635567986d8b379ac3daabe01955d8f94c2aa359b812a2e6cfbba2dc89229
eap7-infinispan-cachestore-jdbc-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: b103970e95a5314acc8a6777efd56648a987dea0d35a6d825d032d4fdd597ff3
eap7-infinispan-cachestore-remote-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 0272bf9cad61363d984d73bc47744dae7f9c1dadf27a3857a04d357cfc5bebe2
eap7-infinispan-client-hotrod-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: fb81b99040958aef8128d04692ad4d8c1c4f42df74c340d2e67f18155d7113b9
eap7-infinispan-commons-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 722fc3d7de0083f850329b9516e4a23468dc96679546b4d18398106709180559
eap7-infinispan-core-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 45148868e1b91b8b985146f0e2a152e7bd2d73f3e916405e246b5aebaab80de6
eap7-infinispan-hibernate-cache-commons-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: ad368efcf36c63efdccac099476dfa8440a1ae55ff6f5b0dfa700c65740d0174
eap7-infinispan-hibernate-cache-spi-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 541134885fba4a662c74c80a266bb98a5bdaf261beab84dae09ccf039cae936e
eap7-infinispan-hibernate-cache-v53-9.4.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 53f24b6534e825bc6ef23007bb3b82e9614dd0c13aab49f8c7643fd5f771e1f3
eap7-ironjacamar-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: d07501808c53c1dffbe1ccbb5736a821db249cc7e1bfb51314fe2daa6b4e70b1
eap7-ironjacamar-common-api-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: b7d5202a4dbca169f6b09e970143681b1012ac72e2be8192e6af736413dea65d
eap7-ironjacamar-common-impl-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5c0ae78c96a100f4c6e7ea606d43b0a4eea496e38e188518ecb781aa12e07cfd
eap7-ironjacamar-common-spi-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: cd2e52303ed841be728f66cad16336e6d11dc991109a3672004a6c53d9cadb44
eap7-ironjacamar-core-api-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: ad2f68d56ded80a2397fbc33e050ec181d780adecd14f99cd77eb56f357ed49c
eap7-ironjacamar-core-impl-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 84f2fb29ca9fd53e896c2965c665fc087f34463aaeec3aeb3859592ad7c840ff
eap7-ironjacamar-deployers-common-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2397b56e9a1d6e8e4cabe0c282227f4c73221c3cf052184dd14a44e9a18a3bb5
eap7-ironjacamar-jdbc-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: f1e47ea27a73a21b4cd3f0b6595734d8aaba0c1eae1eba63c5112ae806ce3b26
eap7-ironjacamar-validator-1.4.33-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: b920062e893b07d81f7acfb4e608fa2daf5dfb38c574112ba471a9ed71968f53
eap7-jberet-1.3.8-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 5d92108d20d3d34498af9c68be2eeda1b00360cddd258557e5e1f87623941b98
eap7-jberet-core-1.3.8-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 04c2e18d20bf64116642a847228d0ed06654be778cb12612cf328196bdd9f6b1
eap7-jboss-remoting-5.0.23-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2687be72dc6b01e55bdb9a6bbaf04a88505e01b0cfc7f32efe8fc128b6361163
eap7-jboss-server-migration-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 76898bb2b5448f342d24d827d559efb41063d0464abb00385a1999c970eb4e0e
eap7-jboss-server-migration-cli-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 9826dc7f9251c230cde668b6c408064a33c4c77b752bce30a06a7d0584898c68
eap7-jboss-server-migration-core-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 26e180a445694499b1bcdf494bbdea05bc3b6398092d5612ff6fdcb55e13cf27
eap7-jboss-server-migration-eap6.4-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: a5b38a1f7cd81d043d31929574a08096a26d17be1ec38bd69ca9e4c961787aa9
eap7-jboss-server-migration-eap6.4-to-eap7.3-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 58bacdfa3fc5ae11f05e44a2385bf2fe8f328a33f1b5246de54cc1538f94b491
eap7-jboss-server-migration-eap7.0-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: a54ce6c3db4301f48f770c7ca5ac809e8f945d4f558a3c1521d13555d4dfe33f
eap7-jboss-server-migration-eap7.1-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 04bd4e0c1b81abd4fb3b45fced7172630d2bbe3a416ffb717753e423a607d771
eap7-jboss-server-migration-eap7.2-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 5f8f9cc1b6db1ce714627f6081ff7fdd966fa01059a8ee210727a38a22b66d3a
eap7-jboss-server-migration-eap7.2-to-eap7.3-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 9fdb459ab27bea6afd5cf74bf90e94773e85dcf6922c749c372897b5cbf1d94a
eap7-jboss-server-migration-eap7.3-server-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: fad68c3887039fc5afa6d7a25e880081d23c8b5327782b4f73516dc8e7fb5d9b
eap7-jboss-server-migration-wildfly10.0-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: fa43389df05085fe91df750a3709c7dcb4e272ac206afe694b84fe09f8ad18b8
eap7-jboss-server-migration-wildfly10.1-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 1f1928b8435bce4953a782f2a4d760fa45e8cf4720981f3b93c14e6f46c7e816
eap7-jboss-server-migration-wildfly11.0-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 32dc57ccd70b35016deb5e080778b15248b56d1e3cf9c679c738972b9895b358
eap7-jboss-server-migration-wildfly12.0-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 599f04502ca4a3516afb140b94d294d50a441e86837fee96f3b2532b8537dd68
eap7-jboss-server-migration-wildfly13.0-server-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: ee8030e617245a6c3d692e572d448e6fa9b9b0142ac21fbce22cd792bffda045
eap7-jboss-server-migration-wildfly14.0-server-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: c3d843b9a4348881fadf89ba688045962612a1d031e7906a55a80bfe905e032b
eap7-jboss-server-migration-wildfly15.0-server-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 56035930d976a8bda756bdf8b21a80468a6d5e5089ab29829b3dd6e4a2b6a9b7
eap7-jboss-server-migration-wildfly16.0-server-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 07d7183f574b8a1a05d97581c6cf50e3bb078d8fc7fe3d179175453e8ff74fe6
eap7-jboss-server-migration-wildfly17.0-server-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 7c11b03d3310195ee8beb25f5a4b651417a4eecebe96ed964b20635d6fef589e
eap7-jboss-server-migration-wildfly18.0-server-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 561ef4b52b78a51f74743e1249bd28d47805fc57cf1c716e7199310710a971d7
eap7-jboss-server-migration-wildfly8.2-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: 499fe5de7d377d0514a3bd668f6e9510d65115b1883a358c2c454234e86d7b72
eap7-jboss-server-migration-wildfly9.0-1.7.2-7.Final_redhat_00008.1.el6eap.noarch.rpm SHA-256: c8b599a4dffea36afabfe08478b47a4b09962335f39f43af78600c0b98da027f
eap7-netty-4.1.63-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 2b66944e8ae4c8f2ea63bf041f00a119bf8b5ef2f9a7f343d118f92c698c781d
eap7-netty-all-4.1.63-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: d735982c8509aa1580542808404451c8374261c350407f1aa8ad3e1a84765f72
eap7-undertow-2.0.38-1.SP1_redhat_00001.1.el6eap.noarch.rpm SHA-256: 82d47c34b3d8f5d0da0389f63a29ba6cc9f6c7f1c196fc26d80788c06e2ac81c
eap7-undertow-server-1.6.3-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: f2ca2477fe0fae0a08199787d5729180c58bbc3a738774686693d0dc94fcb744
eap7-wildfly-7.3.8-1.GA_redhat_00001.1.el6eap.noarch.rpm SHA-256: ec96cdc1296683fe33080461ac57b59c694d173cb75f1c1c8d5a305b6f725364
eap7-wildfly-elytron-1.10.13-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: dd28950efc5dbce71137c262786705d25f6c387a040d690ba2daa6530aa073e6
eap7-wildfly-elytron-tool-1.10.13-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 1a307f7525f123872af1164a275d546798b374dabe3a8f2c7287964683d14785
eap7-wildfly-http-client-common-1.0.28-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 794759d128d2035be08fead325d30c86a7aa4dd708ef6d17681847997170e33a
eap7-wildfly-http-ejb-client-1.0.28-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: d2d89fc4e255f2d68a157533212b8d26bdacfe52a0ba71b5c350d671caa21982
eap7-wildfly-http-naming-client-1.0.28-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: ac42542a2f2882c1264992b90c035a534e4c82c43dfca3730c79a991dfd1c03f
eap7-wildfly-http-transaction-client-1.0.28-1.Final_redhat_00001.1.el6eap.noarch.rpm SHA-256: 4871e2edbc6ab44ccf9a6a0a312da1cfc53b147e5cb7fdba3228978f41724cfd
eap7-wildfly-javadocs-7.3.8-1.GA_redhat_00001.1.el6eap.noarch.rpm SHA-256: 0b4ff77b46e58c3dab91b90f950d4fa6adcefd916b67577b0ce706d7c1594955
eap7-wildfly-modules-7.3.8-1.GA_redhat_00001.1.el6eap.noarch.rpm SHA-256: cbf18b2414309001e9c1b0bdbdbf299299c03ec4b036c975b1dd240d6fb0593f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.