Red Hat Product Errata RHSA-2021:2693 - Security Advisory
Issued:
2021-07-13
Updated:
2021-07-13

RHSA-2021:2693 - Security Advisory

Synopsis

Moderate: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 7 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.3.8 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.3.7, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.3.8 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • netty: Request smuggling via content-length header (CVE-2021-21409)
  • wildfly: XSS via admin console when creating roles in domain mode (CVE-2021-3536)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.3 for RHEL 7 x86_64

Fixes

  • BZ - 1944888 - CVE-2021-21409 netty: Request smuggling via content-length header
  • BZ - 1948001 - CVE-2021-3536 wildfly: XSS via admin console when creating roles in domain mode
  • JBEAP-21179 - Tracker bug for the EAP 7.3.8 release for RHEL-7
  • JBEAP-20264 - [GSS](7.3.z) ISPN-12787 - Non Transactional Cache needs to be invalidated after commit on JPQL update/delete operation
  • JBEAP-20503 - [GSS](7.3.z) WFCORE-5185 - Update ProviderDefinition to use optimised service loading API
  • JBEAP-20623 - [GSS](7.3.z) Upgrade Hibernate ORM from 5.3.20.Final-redhat-00001 to 5.3.20.SP1-redhat-00001
  • JBEAP-21406 - [GSS](7.3.z) Upgrade Ironjacamar from 1.4.30.Final-redhat-00001 to 1.4.33.Final-redhat-00001
  • JBEAP-21421 - (7.3.z) Upgrade Infinispan from 9.4.22.Final-redhat-00001 to 9.4.23.Final-redhat-00001
  • JBEAP-21434 - (7.3.z) Upgrade wildfly-http-client from 1.0.26.Final-redhat-00001 to 1.0.28.Final-redhat-00001
  • JBEAP-21435 - (7.3.z) Upgrade Elytron from 1.10.12.Final-redhat-00001 to 1.10.13.Final-redhat-00001
  • JBEAP-21437 - (7.3.z) Upgrade netty from 4.1.60.Final to 4.1.63
  • JBEAP-21441 - (7.3.z) Upgrade Undertow from 2.0.35.SP1-redhat-00001 to 2.0.38.SP1-redhat-00001
  • JBEAP-21443 - (7.3.z) Upgrade jberet from 1.3.7.Final-redhat-00001 to 1.3.8.Final-redhat-00001
  • JBEAP-21444 - (7.3.z) Upgrade wf-core from 10.1.20.Final-redhat-00001 to 10.1.21.Final-redhat-00001
  • JBEAP-21567 - [GSS](7.3.z) Upgrade HAL from 3.2.14.Final-redhat-00001 to 3.2.15.Final-redhat-00001
  • JBEAP-21582 - (7.3.z) Upgrade remoting from 5.0.20.SP1-redhat-00001 to 5.0.23.Final-redhat-00001
  • JBEAP-21739 - (7.3.z) Upgrade elytron-web from 1.6.2.Final-redhat-00001 to 1.6.3.Final-redhat-00001
  • JBEAP-21977 - [SET](7.3.z) Update product CP branch github template

JBoss Enterprise Application Platform 7.3 for RHEL 7

SRPM
eap7-elytron-web-1.6.3-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 59c63ed0cbd6fe6fa82b6740dc5b73ffbe5544bb516ca0dcd41b0fe0d90971d2
eap7-hal-console-3.2.15-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 003100f8d18e18cdbe9e83b77dab36149ac5c2575e73d40db38b58eabac73309
eap7-hibernate-5.3.20-3.SP1_redhat_00001.1.el7eap.src.rpm SHA-256: 896c6d1c406ab850a448f9df4cfc79616d4809b82db4d0296dc87caaef43b20a
eap7-infinispan-9.4.23-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: bdf01fd83fb9acf1416ff8fb0d6e1242c164e5a1eb41a3979fec71b87b2c82ce
eap7-ironjacamar-1.4.33-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 6a720956ce5b723c092c83366a242f060ce7c898a53c455e7c8bcbca98aed52d
eap7-jberet-1.3.8-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 733ce3f05150b50824460f8738632f0c00902dd63d46fee4e07082b9960a90f5
eap7-jboss-remoting-5.0.23-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: b825fc23011de0268e59a6985663a1b883e745f473dfb1ee7a1ae4e9f66ce337
eap7-jboss-server-migration-1.7.2-7.Final_redhat_00008.1.el7eap.src.rpm SHA-256: 8b61711cf505ca631888d8b0474710859473cae16bdd1e07929ca3f4b78d8211
eap7-netty-4.1.63-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 8ddaf4f888db966df215f8cb26ee49bd221d79743882ea8cfe2a9df70af9db42
eap7-undertow-2.0.38-1.SP1_redhat_00001.1.el7eap.src.rpm SHA-256: b6d76bd00875e93f545a1c3a26b7d01a3841893e84abcd482c73d9d146001108
eap7-wildfly-7.3.8-1.GA_redhat_00001.1.el7eap.src.rpm SHA-256: 1262a137b9af74f325a25376a1633003224e1db356324f3f25a89389b7279923
eap7-wildfly-elytron-1.10.13-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 2cce0fc55348da9aac4e09f0b815d05e6022a3f081515a0caf7c6f42464c4860
eap7-wildfly-http-client-1.0.28-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 6cf09785791f704be45568a86adabe64c59a81cdbdfa0c50e38eaecc2279bc51
x86_64
eap7-hal-console-3.2.15-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 79572919bf7e0e78699c897f2bf79e15158c044c0cd690ea1569e926a3795908
eap7-hibernate-5.3.20-3.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 1e0c5c449964c6625a8dfe8375a827ddc27751f10263c1d4b5770f01b5cda2d2
eap7-hibernate-core-5.3.20-3.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: ae2b437916bec1f4cb140e25cbffbae465cab93519fa26a8f38328d114cf6653
eap7-hibernate-entitymanager-5.3.20-3.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 49943bde807d20b2c2056006470ed1d33bf6d13b37d948f599833dbe0e54a226
eap7-hibernate-envers-5.3.20-3.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 5a22d7e3aab6b2911076d2ab2b32ea59d2530f25d93b2fd8bf8d169256f7650d
eap7-hibernate-java8-5.3.20-3.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 724d4ffa5a4246f0e8fe55c403997f1d90fec6963f9c0465274a2cb79b833970
eap7-infinispan-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 98151f59ccd2fc298a038edd4f5621149b51bae07a3f9cb16cc865b3eb80c40b
eap7-infinispan-cachestore-jdbc-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 8f76ce57b27cf1bb14fdae66d06c949229ec2aaaa37514f7ce7dcc189f3058f6
eap7-infinispan-cachestore-remote-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 76bd168a8597174f827a62c5432d669b9dfeb1829a42637fb5ef7dcdd714b814
eap7-infinispan-client-hotrod-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: acbfb2df10ac6a3cb606b4b6f8ba80ac75cbd6be8a73ff5635732ed510fa8fa1
eap7-infinispan-commons-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 077d0d08182a59d7a53de1a75da522b7dd199ce2cd648396b78ca6e5f80025c8
eap7-infinispan-core-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: c3fd88e399226a78ca54ed83eccd4426aca5857673a0a1842606dd93293dc9d9
eap7-infinispan-hibernate-cache-commons-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 87838c7c2ed57ba13131d19169dbe9af7ddfaf3026990091c861d3e6db10a5b9
eap7-infinispan-hibernate-cache-spi-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 6e9a5b3938a0858ff57b53a21c76dc0c7af050c55e3a985ae873acc6af86ba5a
eap7-infinispan-hibernate-cache-v53-9.4.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: d5e3ea20e200eb11ed43d473d96f12e15cf033e9f7ee155f9c193d1ed0cbe16a
eap7-ironjacamar-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: eb628f0df88e0d0ec9913f0eaedcf6e7b5e09381eaf73816197a5761c8cd0ac8
eap7-ironjacamar-common-api-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: ecfc62329889550a6147c119602d45169bd6edcee0043af336217d43d3cda63f
eap7-ironjacamar-common-impl-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 096cbc7199c9c4805fd71bf05f0887310cc8250f8effa0080f43f77805f2a8a9
eap7-ironjacamar-common-spi-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 86de8e0d9a62c8d2c79f72c3d27f438f4ba3c9ec0637022def94523cef7e8d48
eap7-ironjacamar-core-api-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 1512a18e8ffc6de1818a9829f9e40d34a3cef17a94f5cfa352ddbbf0f91fdc36
eap7-ironjacamar-core-impl-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: b877423d04e30842cba6670171d6ff5c5fd361c613bb279437b77ee773a6f924
eap7-ironjacamar-deployers-common-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 25276ea9fda10ee65a6139c3f006a570d738bab1b30dac6313b4dbd8a2b0c16f
eap7-ironjacamar-jdbc-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 559c00c82c43c493cd791fd92ab81be557a9ff34ed8c9ed0b995809e6d9dbac9
eap7-ironjacamar-validator-1.4.33-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 48d70ccb30168662410046d8d06e7a676f9319772fdb6ed8c0fe96506a192880
eap7-jberet-1.3.8-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 272d484854adf8c528c44fcb656400d688baa83fbe060f7aa004700aba7242d1
eap7-jberet-core-1.3.8-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 856e76d070644c317a6a70cf82b90f4303efee7117d4e0cbab8808fd9336c94a
eap7-jboss-remoting-5.0.23-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 68c0898362799f841e38d5ae375d8e2120f07585d9edd9b76dadf68377e215f2
eap7-jboss-server-migration-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: b8129a773841853295a0a03592a8066e5ee8e91134240b2524c5cb42b25c46f3
eap7-jboss-server-migration-cli-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 46776d3e103c967382d0a2cdc29aefafe5d436240846b254a7c1d677db919c3a
eap7-jboss-server-migration-core-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: c886b32ffbdae68c981665d9f1b4aeb65258bfce2cbcb6e1b7ed83e80301e22f
eap7-jboss-server-migration-eap6.4-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 642d6905f8064bac03e4d1dd13386fbb588d5d96011d48d8a507e0cadfb75c8e
eap7-jboss-server-migration-eap6.4-to-eap7.3-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 520d42c22ebb6ec144d52746a625a53d74feeef3ed9acf8964640451fee64529
eap7-jboss-server-migration-eap7.0-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 763ebb03699ef7bf86e367af21b52bf42a9737e8b613f61f89ad13cfff243f7e
eap7-jboss-server-migration-eap7.1-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 0194fb4497e4fec07aa348179a00baf9a628adfd5e31382e71c085a616cba5fc
eap7-jboss-server-migration-eap7.2-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: a011e1d3045d0d7b03bd68e6b14400b67a0d61387df2d166ffd71933ecc29a6a
eap7-jboss-server-migration-eap7.2-to-eap7.3-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: c13d7a29936583d2853e004fa3e7b9063e3b64c00a0f098b1388c1234d2d1f36
eap7-jboss-server-migration-eap7.3-server-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 8ab5c7a145d9a0571d502480255276c2ee9553dca60c3728059ae733af976c83
eap7-jboss-server-migration-wildfly10.0-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 60e2f20bf06f60c73acdfda1a86f2409a21239ebf33f86a564c57b8122acc193
eap7-jboss-server-migration-wildfly10.1-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 8eb9c411ee590301a4fb4fcd8816c0b3465e614320976dc3ddf2dec000a9ccf2
eap7-jboss-server-migration-wildfly11.0-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 05dffa9ad4591a5212fc31d9e6eb3f4b1ce43ee40ee68a9a0dc4c5709fdd3c4b
eap7-jboss-server-migration-wildfly12.0-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: bebd2c4c42c62470c0bb6afa41bd3753d320d0dfaa5b95edead38a8dd9015385
eap7-jboss-server-migration-wildfly13.0-server-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 6ff2a33dc2fe5820c71f49a5989f24cd03db27ad9aaaca8db19f6f93cb307413
eap7-jboss-server-migration-wildfly14.0-server-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 5a8e9be6989e032172a0d222406ac05dd53eae599b7af5b8a37eec4df83a2d68
eap7-jboss-server-migration-wildfly15.0-server-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 43d431d4d3f0a7a6febe1cf3bfeaa6165d475210546ae0af782681d6ed42339f
eap7-jboss-server-migration-wildfly16.0-server-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: daafc39a83554c511d6be51f943681dd6a84376162a2e630471ce68ea5ebb595
eap7-jboss-server-migration-wildfly17.0-server-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: d860c3bd7c6def5c29f00abe56d444fb9a5ee21482c23fa785faed5d30d7dceb
eap7-jboss-server-migration-wildfly18.0-server-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: 61d8fbd602074932c23f8a61f608fe8c7c9b222e2a1a6629d8e216e0745dca51
eap7-jboss-server-migration-wildfly8.2-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: a22c72192a8e8501fef08800a3d10985a5200b62f4049e0c06f31b2e38e0f70d
eap7-jboss-server-migration-wildfly9.0-1.7.2-7.Final_redhat_00008.1.el7eap.noarch.rpm SHA-256: fe25fae07a380eaaeeb6aa68180ff907b3daabff420de240df6741d8aad6a943
eap7-netty-4.1.63-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 0459d95ef8f7fce65bc6a59d94ad978f452f3435f74eaa13dbf919005646f0b6
eap7-netty-all-4.1.63-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 78bb64a830d118bd89372788350b67ffaada57d4df6c5251041edf8c64b4015f
eap7-undertow-2.0.38-1.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: b68db1ec66a8789ba5babe0941307fc53d87dbb553c4ced522d4f7e26f40fbc1
eap7-undertow-server-1.6.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: dd9f40dd5040ec982ea0ca580920555339fae09da2f37b383fdf39784643f41d
eap7-wildfly-7.3.8-1.GA_redhat_00001.1.el7eap.noarch.rpm SHA-256: fe7a8c404887bf63fd8a04a4687184b0d8c8de36e8c64c2c3cd34eaffc6398dd
eap7-wildfly-elytron-1.10.13-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: a9ee35435b4f534661e6b62877b3ac2aff16ae619254dea49f5b71c562d2ced4
eap7-wildfly-elytron-tool-1.10.13-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 62fad7699aded624e6b466dfebbcf564b8d6c875598a2fb927f5adb0cac94453
eap7-wildfly-http-client-common-1.0.28-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 631ea5bc54e96b420500b93f17f8d3acf4e5924dd9ce69fce920bc92ad0a455a
eap7-wildfly-http-ejb-client-1.0.28-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 04c03323c918746d679d118d1c7103f6b4200b8f0f140ffc16c962f9f40ef11d
eap7-wildfly-http-naming-client-1.0.28-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 47cded9ff1bcd91367f7f31b03402817877c5c18e4da841619e3299c025212cc
eap7-wildfly-http-transaction-client-1.0.28-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 84028e21da22f4e1a68ed7dbee6a32e4dd3feaf1cca3d72d7aa7a9d56b1b4c9a
eap7-wildfly-java-jdk11-7.3.8-1.GA_redhat_00001.1.el7eap.noarch.rpm SHA-256: a9695d540323fc62b835683983744b3469b6180a5de8309eb8f4969dc0fcf7f5
eap7-wildfly-java-jdk8-7.3.8-1.GA_redhat_00001.1.el7eap.noarch.rpm SHA-256: 3145605d041f9a22b5d7863d3fb9e1b44bcb41820ff00dd616d50b1e91b1c360
eap7-wildfly-javadocs-7.3.8-1.GA_redhat_00001.1.el7eap.noarch.rpm SHA-256: f42cc82fbc360a724fce40aaec8940c61339ff85d2c4d35673453e925e0b2ea9
eap7-wildfly-modules-7.3.8-1.GA_redhat_00001.1.el7eap.noarch.rpm SHA-256: b1d1b98f3efd8ab40a84ff7eb5012acf4afa265ad08e054703142b48fa8ef77f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.