JBoss Enterprise Application Platform 7.4 Update 12 Release Notes

Updated -

In order to better meet customer expectations, micro releases for JBoss EAP 7 have been discontinued and replaced with updates delivered on a repeating schedule.

Each new update will contain a number of bug fixes for customer reported issues and potentially a number of security fixes. We expect that the updates will substantially reduce the number of individual patches that we produce and that customers must manage to keep their installations up to date.

For more information see the following Red Hat Knowledgebase articles: Maintenance Release Changes in EAP 6.2+ and Updated Patch Management with EAP 6.2+

This update includes all fixes and changes from JBoss Enterprise Application Platform 7.4 Update 11

Download JBoss Enterprise Application Platform 7.4 Update 12

This update includes fixes for the following security related issues:

ID Component Impact Summary
CVE-2023-1436 Server Moderate jettison: Uncontrolled Recursion in JSONArray
CVE-2021-46877 Server Moderate jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode
CVE-2023-3223 Undertow Important undertow: OutOfMemoryError due to @MultipartConfig handling


This update includes the following bug fixes or changes:

ID Component Summary
JBEAP-6180 ActiveMQ Artemis is logging warnings during server shut down
JBEAP-24841 Clustering Session is not getting expired even after Session timeout time. In EAP 7.4 Update 10 with JDK 1.8
JBEAP-24844 Clustering WFLY-16030 - Infinispan subsystem custom to use modules configuration attribute as List of modules
JBEAP-24742 EJB ELY-2535 - EJB lookups between two deployments doesn't work
JBEAP-24839 EJB WFLY-17807 - Invalid @Schedule expression results in infinite loop
JBEAP-24824 EJB WFLY-17957 - EJB timer schedule increment 0 should be considered as single value
JBEAP-24818 EJB EJBCLIENT-493 - Verbose DISCOVERY_ADDITIONAL_TIMEOUT logging during EJB discovery
JBEAP-24691 EJB French translation bug in WLFYEJB0330 message: timer has expired != La minuterie n'a pas expiré
JBEAP-24866 EJB WFLY-18040 - EJB: make deployments share client context if only static interceptors are used
JBEAP-24734 Hibernate HHH-15602 - ByteBuddy enhancement generates faulty code with many-to-many associations
JBEAP-24791 Hibernate HHH-16485 - Insert ordering doesn't consider root entity names
JBEAP-24992 Insights Generated report from Insights is sometimes invalid JSON
JBEAP-24735 JCA Annotations in resource adapter module are not processed
JBEAP-24688 JCA JBoss EAP does not log exceptions thrown during a failed deployment of a resource adapter module
JBEAP-24860 Management WFCORE-6339 - Define remote name as origin if none is defined
JBEAP-24846 Management WFCORE-6351 - The publish-configuration command doesn't throw an error when the git location is invalid
JBEAP-24741 Scripts enable elytron example cli scripts not setting security=elytron on iiop subsystem
JBEAP-24752 Security Picketlink causing ConcurrentModificationException while deploying the application from DocumentBuilderImpl.setFeatures
JBEAP-24669 Security applicationSSC is required when running enable-elytron-se17.cli / enable-elytron-se17-domain.cli [details]
JBEAP-24716 Server WFCORE-6290 - Failure to handle errors loading process-uuid file
JBEAP-23722 Undertow UNDERTOW-2241 Undertow write-timeout can cause missing the last zero-length chunk in long polling [details]
JBEAP-24545 Undertow UNDERTOW-2243 - Eager flush/close on content length response prevents POST from finishing
JBEAP-24328 Undertow UNDERTOW-2251 / UNDERTOW-2258 - protocol error with HTTP/2 and Expect: 100-continue part 2
JBEAP-24946 Undertow UNDERTOW-2267 - Fix change in behaviour of Servlet.init() method when loadOnStartup is required [details]
JBEAP-25198 Undertow Server responds with chunked transfer even for short data from deployment
JBEAP-25053 Undertow UNDERTOW-2281 - Undertow HTTP2 breaks protocol specification when client misbehaves
JBEAP-24733 Web Console HAL-1848 - Web console: Disabled datasource throws error in Runtime
JBEAP-24823 XML Frameworks XALANJ-2419 - Astral characters written as a pair of NCRs with the surrogate scalar values when using UTF-8


Installation

Archive / zip / installer based installations

Note: This update zip should only be applied to installer or zip-based installations.

To apply this update using the CLI on Unix-based systems, run the following command from JBOSS_HOME:

bin/jboss-cli.sh "patch apply path/to/jboss-eap-7.4.12-patch.zip"

To apply this update using the CLI on Windows-based systems, run the following command from JBOSS_HOME:

bin\jboss-cli.bat "patch apply path\to\jboss-eap-7.4.12-patch.zip"

These commands will apply the update to the installation that contains the CLI script. Other scenarios and use of the management console are covered in the JBoss EAP 7.4 Patching And Upgrading Guide

RPM installations

See the documentation: Updating an RPM installation

OpenShift Container installations

Update the containers to use the latest tag, to be current on JBoss EAP bug fixes as well as OpenJDK and RHEL fixes.

Known Issues

Notes

Comments