Issued:
2022-02-02
Updated:
2022-02-02

RHSA-2022:0400 - Security Advisory

Synopsis

Important: Red Hat JBoss Enterprise Application Platform 7.4.3 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform 7.4.3 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.2, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.3 Release Notes for information about the most significant bug fixes and enhancements included in this release.

Security Fix(es):

  • undertow: client side invocation timeout raised when calling over HTTP2 (CVE-2021-3859)
  • EAP 7: Incomplete fix of CVE-2016-4978 in HornetQ library (CVE-2021-20318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • JBoss Enterprise Application Platform 7.4 for RHEL 7 x86_64

Fixes

  • BZ - 2010378 - CVE-2021-3859 undertow: client side invocation timeout raised when calling over HTTP2
  • BZ - 2010559 - CVE-2021-20318 EAP 7: Incomplete fix of CVE-2016-4978 in HornetQ library
  • JBEAP-22641 - Tracker bug for the EAP 7.4.3 release for RHEL-7
  • JBEAP-22100 - (7.4.z) Upgrade galleon-plugins to a 5.1.x version with WFGP-195 fixed
  • JBEAP-22104 - (7.4.z) Upgrade JBoss Classfilewriter from 1.2.4.Final-redhat-00001 to 1.2.5.Final-redhat-00001
  • JBEAP-22106 - (7.4.z) Upgrade to JBoss Marshalling from 2.0.11.Final-redhat-00001 to 2.0.12.Final-redhat-00001
  • JBEAP-22108 - (7.4.z) Upgrade to Byteman from 4.0.14 to 4.0.16
  • JBEAP-22373 - (7.4.z) Upgrade galleon-plugins in wildfly-core-eap from 5.1.0.Final to 5.1.4.Final
  • JBEAP-22505 - [GSS](7.4.z) WFLY-14923 - Update JPA handling to support `initialize-in-order`
  • JBEAP-22575 - (7.4.z) Upgrade mod_cluster from 1.4.3.Final-redhat-00002 to 1.4.4.Final
  • JBEAP-22582 - (7.4.z) Upgrade WildFly Core from 15.0.5.Final-redhat-00001 to 15.0.6.Final-redhat-00001
  • JBEAP-22586 - (7.4.z) Upgrade RESTEasy from 3.15.2.Final-redhat-00001 to 3.15.3.Final-redhat-00001
  • JBEAP-22587 - (7.4.z) Upgrade Hibernate ORM from 5.3.23.Final-redhat-00001 to 5.3.24.Final-redhat-00001
  • JBEAP-22590 - (7.4.z) Upgrade Mockito from 2.18.0 to 3.10.0
  • JBEAP-22609 - (7.4.z) Upgrade XNIO from 3.8.4.Final-redhat-00001 to 3.8.5.SP1-redhat-00001
  • JBEAP-22668 - (7.4.z) Upgrade Elytron from 1.15.6.Final-redhat-00001 to 1.15.9.Final
  • JBEAP-22679 - [GSS](7.4.z) UNDERTOW-1984 - GOAWAY sent by HTTP2 server when a RST is sent after upgrade
  • JBEAP-22692 - (7.4.z) Upgrade Ironjacamar from 1.5.2.Final-redhat-00001 to 1.5.3.Final-redhat-00001
  • JBEAP-22693 - (7.4.z) Upgrade jboss-ejb-client from 4.0.43.Final-redhat-00001 to 4.0.44.Final-redhat-00001
  • JBEAP-22740 - (7.4.z) Upgrade jgroups_azure from 1.3.0.Final-redhat-00001 to 1.3.1.Final
  • JBEAP-22754 - (7.4.z) Upgrade azure-storage 8.6.6
  • JBEAP-22793 - (7.4.z) Update elytron-tool scripts to make use of jboss-modules
  • JBEAP-22822 - (7.4.z) Update ElytronHttpExchange#getRequestURI to no longer use the 7 argument URI constructor
  • JBEAP-22823 - (7.4.z) Upgrade undertow from 2.2.13.SP1 to 2.2.13.SP2
  • JBEAP-22833 - (7.4.z) Upgrade elytron-web from 1.9.1.Final-redhat-00001 to 1.9.2.Final-redhat-00001
  • JBEAP-22851 - (7.4.z) Upgrade WildFly Http Client from 1.1.8.Final-redhat-00001 to 1.1.10.Final-redhat-00001

JBoss Enterprise Application Platform 7.4 for RHEL 7

SRPM
eap7-azure-storage-8.6.6-1.redhat_00001.1.el7eap.src.rpm SHA-256: c6403aeb9183bb03055dfb094375aceecdcab4b37ebe3f6913f15209a47de897
eap7-elytron-web-1.9.2-2.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 209c766144d18eab3b7d00dd7ce72fee6e34f446a7b1d4834f14ae0933430fa3
eap7-hibernate-5.3.24-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: d70985560a21a3106dfffaa85b07a01e8df81b21fe8a667f3acc309621adedc4
eap7-hornetq-2.4.8-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 95de85ff24cde485eefd85c3fa67b19038f61ef8df2f2c13d6bb47df35c7b2d4
eap7-ironjacamar-1.5.3-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: deb0512b4328a8eccf810bedb96c3ed37de2080e95a72fc2f15bd6e8576fe7d4
eap7-jboss-classfilewriter-1.2.5-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: dc448ad04e75364e6fb2f03039d5bdaa10143488a15dd1a242502e91778469aa
eap7-jboss-ejb-client-4.0.44-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 415689811e1db8a6041d2d07ae81fb3a78df8ef3e58630e44f5554ddd0558ff4
eap7-jboss-marshalling-2.0.12-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: f393d4287d6c8369ada9990c96621240e612e97083a3f1b7c90491de418c15a9
eap7-jboss-server-migration-1.10.0-13.Final_redhat_00012.1.el7eap.src.rpm SHA-256: eabafbda33f5edb85796bed16f04e029e15dbb05b616a81aea4fb27be803cc88
eap7-jboss-xnio-base-3.8.5-1.SP1_redhat_00001.1.el7eap.src.rpm SHA-256: 4d6562048322eb772e9a3729504f4cc20ce451b1af9eb8593549935052466f49
eap7-jgroups-4.2.15-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 0797f333be572675025dac1a738de4cb745d04bd8802dcd21e6bf89745000bf3
eap7-jgroups-azure-1.3.1-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: cfbc2c2574723ef781a9cd4157a42ba679cca6169539d2e558bf976ab1a2aa7b
eap7-mod_cluster-1.4.4-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: b7d28af3dbf220b988e78cc913d01d627d7d9e8da3aefa374b11207d68bc3fe8
eap7-resteasy-3.15.3-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 8a89f812a75024daa3cdbfccb0bbd9d5a6ea62622ec2169ec843761393cbda78
eap7-undertow-2.2.13-1.SP2_redhat_00001.1.el7eap.src.rpm SHA-256: 32caed26d5d68c3eacd36e46b272bc87ae67b32434bb7a396cb42d883a2c0d90
eap7-wildfly-7.4.3-5.GA_redhat_00002.1.el7eap.src.rpm SHA-256: b5ea6d9fbe97be65f88e6ac5eb786de4fc72f23129275c782a4b4a008379eee6
eap7-wildfly-elytron-1.15.9-2.Final_redhat_00001.1.el7eap.src.rpm SHA-256: c95bdcb30e72b305e1f9b067fdcb91e5e612c64fadf989e6bcbc02a05486ce79
eap7-wildfly-http-client-1.1.10-1.Final_redhat_00001.1.el7eap.src.rpm SHA-256: 3bb547b8998f61a82983c61b74d829c503d00d3fa9af2b5ead7fc6e697d1de2b
x86_64
eap7-azure-storage-8.6.6-1.redhat_00001.1.el7eap.noarch.rpm SHA-256: 07bafcfb295073da7d61cc22687643973e6fba7a21748ce83bc8aad361af13a9
eap7-hibernate-5.3.24-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 8bbf4b06cfd4ca7cd361e86800be725100a560450f522feeb496894f2de1b9a9
eap7-hibernate-core-5.3.24-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 271cec0a28d68c7cb63a9e7ca655a96f6988c49dce4326de9af78016f51add66
eap7-hibernate-entitymanager-5.3.24-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 97a413c65af7cb818dadd78c323df8f0f8518083c13737bb9be4bfba0dbfed22
eap7-hibernate-envers-5.3.24-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: a9fd34e5f8a2f032d8438a46219d21c3f58b9a1dd60d71896be6e503003f4909
eap7-hibernate-java8-5.3.24-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 5fa028b9f5a64d95920eb10c38a42bc7f777fc7a52fa020c833b82b370476927
eap7-hornetq-2.4.8-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 5d44989c47a26fd61cd4638f4fa68803c34d457ef7770ba681618eb5f8eebc42
eap7-hornetq-commons-2.4.8-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 25e3f3cea2fa8d29bce674687ac1e7f5d4999bd9411ff1537cf16f43c655905a
eap7-hornetq-core-client-2.4.8-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: f843fd457578425810b7b5dbb8b4dd375c4ab78c6d8182468f347bed5b176303
eap7-hornetq-jms-client-2.4.8-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: b898f57d4fb162031ac9c3309ff5b930d47ada1ec2136e5e28f94d3fe36d5487
eap7-ironjacamar-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 4fb36385f57bd28a13730611d6a03db2950ef5483b26f8a844031ac6e94fe3ae
eap7-ironjacamar-common-api-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 8f9c6569847158fd300d81de58ad026193ea7b2e55fc7ef56b51c5d7427efb4f
eap7-ironjacamar-common-impl-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: dcd19a8f337d00e4c6937f89f929013416e8a911ee46654321e0b9b2b9ffbf05
eap7-ironjacamar-common-spi-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: eb2b1ce4af6f47f8f96972d60554bd7b99dda1f770e7b9c606af93a3c72a5466
eap7-ironjacamar-core-api-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: a2d72c609b062cd3b3914626209ca01df8e3fa0efe345ffcd5eeef123ef8910c
eap7-ironjacamar-core-impl-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 18e21c5b071f59fabe433d85e1630623eea7877f634814d96f2785bf6ba92862
eap7-ironjacamar-deployers-common-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 9bd08e447c35499120269be42f2ef7365436e12a2205d38d8f359b867eced9ae
eap7-ironjacamar-jdbc-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 5fb6b02f81d76007076e6d4a114794e3f128f038977881a7b9bc9ed8a3ead37a
eap7-ironjacamar-validator-1.5.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 5c111452c481aa3cd8eaea9e92d44577c6a7529b56f67f560e4fe72d2a479aab
eap7-jboss-classfilewriter-1.2.5-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 727eedc18c7bac29b52f7206629b8d61e4c5ce6100f950188523fd898e524113
eap7-jboss-ejb-client-4.0.44-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 67896c248280e5e8233d4e883d9fd4edb450b6cc1410102088705947819ecab0
eap7-jboss-marshalling-2.0.12-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 03e54d7590a823c0a0ad9f00159a091fd5a44e4b4503fdab17ff40e4b8d47624
eap7-jboss-marshalling-river-2.0.12-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: fe270896c688df0b7b560465f4a5898cd98d8b431a3714e237b3366b7edcc0a2
eap7-jboss-server-migration-1.10.0-13.Final_redhat_00012.1.el7eap.noarch.rpm SHA-256: acbc21ecea4825025620565e3a55e16aaf93c58b7a43982fa09aa223e03a947f
eap7-jboss-server-migration-cli-1.10.0-13.Final_redhat_00012.1.el7eap.noarch.rpm SHA-256: 4f792b74b135645842ea8c85d2a2d9d9f0fa2a419294bd061ae1dad5874e77f9
eap7-jboss-server-migration-core-1.10.0-13.Final_redhat_00012.1.el7eap.noarch.rpm SHA-256: dd127716e7fa161971ee7a29eff902d0f0360453fc9e2465b0d2c0e77f2e6501
eap7-jboss-xnio-base-3.8.5-1.SP1_redhat_00001.1.el7eap.noarch.rpm SHA-256: 62f5e4c638f2b79aa6187f8ff947510d9f253eafb7dc6f0ee404c3fbaf60a467
eap7-jgroups-4.2.15-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 2e8b6997a8c76dd915a1f5a950e376f45856a89736d3d91820744afef8c2fa02
eap7-jgroups-azure-1.3.1-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 4ccdb08584f1939123c5ef065f7afd89142b733984a35e00027cf4c1ea8d24c2
eap7-mod_cluster-1.4.4-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 8733582b27e50c695ab5183c42cf9cbd23f33b1434cf931b3bf33ce47efffbd4
eap7-resteasy-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 369baa80c9d1727c9fbc9a768d369b2183f5cb57177169c73083fd0e6cb8fe04
eap7-resteasy-atom-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 06b04e7fd112068c31d1bb68aa26ddda8ad80d5d71b4dbd9c0c7466c9152230b
eap7-resteasy-cdi-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: f655ba1c3cb34e39e599a4b7d1c7b6bf251ca4b1b13d974cd7109ce9a9ec259a
eap7-resteasy-client-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 1c16a1c78e2a3e99cf7d703ab953a654f39d0d9891b7b9b061f0cea2d4d8e847
eap7-resteasy-crypto-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: b38b4f8a72d601f41eb13f945970a47ca006cfca0f453737e5244539ea35e87b
eap7-resteasy-jackson-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 4842237ecdbfd03b514562256be08521fec70e37f9fa661a0dc2b073c31490b2
eap7-resteasy-jackson2-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 2a7a113ae1b91434bdc048c907aebac5c239fe5bf78fe5a1b9c0b81b277f0004
eap7-resteasy-jaxb-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: b58cfe734a36a8f7cdbacbe75f12e8b7b1bf51e56fb3616637823582c601d2a1
eap7-resteasy-jaxrs-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 75d048880508938b723da151c38001d876540be6ccf307b240963ffe5be29b99
eap7-resteasy-jettison-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: c93df7afbdee48afc9c0fdd3d8c7f57a1854d17606d9a9b3cf3fb0001462aa9f
eap7-resteasy-jose-jwt-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 7652ba08405f3371be1f1f51c6ef93822e07f9409e8d7ec6f98304e8066f2402
eap7-resteasy-jsapi-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: d579805062564687894fec9bbaa3251290d28320f65bf61f26f6dbd1c418003e
eap7-resteasy-json-binding-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 3967f22a327ce028b71ef0d9113ada960d608dba82c59ae34d921ab5ac5d3ef4
eap7-resteasy-json-p-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: d6422ef108922c7704448b061b5add3fd66e535830d525cbd899e62a1af57cb3
eap7-resteasy-multipart-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 028339c1adc2716981d3baf0f1c45033443405055c4733293a3cad41901e8935
eap7-resteasy-rxjava2-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 3d486afc8c2c5afdaf270e5cf7585e6de186cc85ab94254f765cb2fd784196bd
eap7-resteasy-spring-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 3c5506c75cae3780b8320bd30b99d6104948d812b7ddab10a7ea5b8e5b661011
eap7-resteasy-validator-provider-11-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 0676f1ddadea5bc4aa326db1d3fbddd8cae1c24793ae4fbaa7caa73ed91e00c0
eap7-resteasy-yaml-provider-3.15.3-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: dda7a91bad808507c50d5c444283a8702140b65a8bdd184c17e04b7c1ae19621
eap7-undertow-2.2.13-1.SP2_redhat_00001.1.el7eap.noarch.rpm SHA-256: 12e2fc4f0059e2ecbfa2d205b5e5baa457a1ae2222ad673fd2d725404e916498
eap7-undertow-server-1.9.2-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 0b46bf75d6f1c08a1cd0a3f61f64ba451ceae7f2124da721eed3bc74600d2936
eap7-wildfly-7.4.3-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 67c0601dcbde1097179890bee728566f26ae62ad4a70602d8b7e30602c8ac107
eap7-wildfly-elytron-1.15.9-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 4a45ed4ba99ba8c66ecfbbd85e22f908899b8c6eef5c361f61e6ac135cc5be30
eap7-wildfly-elytron-tool-1.15.9-2.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 3a414f97ec6b0bba183c35c846cdde449f441bd802e1f46eaa829b1912f05e4e
eap7-wildfly-http-client-common-1.1.10-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: deb81a89a0c01f304c2a59d64831c4a2de81b71e49a05afe85560d0859179a4e
eap7-wildfly-http-ejb-client-1.1.10-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 6754f281aca8a8e56e522b5a0f6c6275f829cf429618b783b9ecf1eccbbaa54b
eap7-wildfly-http-naming-client-1.1.10-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: f3f04f03d400dd6501c7af16c6dcb98c3226eaef3ea26bcd2c77f4a017c53d8f
eap7-wildfly-http-transaction-client-1.1.10-1.Final_redhat_00001.1.el7eap.noarch.rpm SHA-256: 6b7c046d9ec76a31945a2593de7ed2b6744d7abd6f1add89b6c56ad70e062cf7
eap7-wildfly-java-jdk11-7.4.3-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 6ec3d4526011535f6b5299a4c70e202273b5ea4208bd7dd57deadc7aeebcc0be
eap7-wildfly-java-jdk8-7.4.3-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 2e4f57f63114fcb5451b7057dcf548367a74d89b262f28c1f7bc20a5cd209432
eap7-wildfly-javadocs-7.4.3-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 38088f4ef69dccb7d6282587b2e0fe396f5ec58a4c412bb6e658ab62a3910533
eap7-wildfly-modules-7.4.3-5.GA_redhat_00002.1.el7eap.noarch.rpm SHA-256: 1f482a54d98df47189e5c1dadf1d733137064fef684b5c26bd711dc2911617e0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.