RHSA-2021:0872

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.6 security update

CVSS Metrics

• v3.1•HIGH•Score: 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• redhat•eap7-activemq-artemis

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-cli

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-commons

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-core-client

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-dto

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-hornetq-protocol

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-hqclient-protocol

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-jdbc-store

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-jms-client

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-jms-server

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-journal

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-ra

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-selector

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-server

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-service-extensions

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-activemq-artemis-tools

  < 0:2.9.0-9.redhat_00019.1.el6eap

• redhat•eap7-bouncycastle

  < 0:1.68.0-1.redhat_00001.1.el6eap

• redhat•eap7-bouncycastle-mail

  < 0:1.68.0-1.redhat_00001.1.el6eap

• redhat•eap7-bouncycastle-pkix

  < 0:1.68.0-1.redhat_00001.1.el6eap

• redhat•eap7-bouncycastle-prov

  < 0:1.68.0-1.redhat_00001.1.el6eap

• redhat•eap7-guava

  < 0:30.1.0-1.redhat_00001.1.el6eap

• redhat•eap7-guava-failureaccess

  < 0:1.0.1-1.redhat_00002.1.el6eap

• redhat•eap7-guava-libraries

  < 0:30.1.0-1.redhat_00001.1.el6eap

• redhat•eap7-hal-console

  < 0:3.2.13-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-common-api

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-common-impl

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-common-spi

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-core-api

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-core-impl

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-deployers-common

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-jdbc

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-ironjacamar-validator

  < 0:1.4.27-1.Final_redhat_00001.1.el6eap

• redhat•eap7-jboss-ejb-client

  < 0:4.0.39-1.SP1_redhat_00001.1.el6eap

• redhat•eap7-jboss-logmanager

  < 0:2.1.18-1.Final_redhat_00001.1.el6eap

• redhat•eap7-jboss-remoting

  < 0:5.0.20-2.SP1_redhat_00001.1.el6eap

• redhat•eap7-jboss-server-migration

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-cli

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-core

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-eap6.4

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-eap6.4-to-eap7.3

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-eap7.0

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-eap7.1

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-eap7.2

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-eap7.2-to-eap7.3

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-eap7.3-server

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-wildfly10.0

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-wildfly10.1

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-wildfly11.0

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

• redhat•eap7-jboss-server-migration-wildfly12.0

  < 0:1.7.2-5.Final_redhat_00006.1.el6eap

Showing first 50 affected entries in server-rendered view.

References (47)

• https://access.redhat.com/errata/RHSA-2021:0872
• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/
• https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/
• https://bugzilla.redhat.com/show_bug.cgi?id=1905796
• https://bugzilla.redhat.com/show_bug.cgi?id=1906919
• https://bugzilla.redhat.com/show_bug.cgi?id=1912881
• https://bugzilla.redhat.com/show_bug.cgi?id=1923133
• https://bugzilla.redhat.com/show_bug.cgi?id=1929479
• https://issues.redhat.com/browse/JBEAP-20336
• https://issues.redhat.com/browse/JBEAP-20628
• https://issues.redhat.com/browse/JBEAP-20672
• https://issues.redhat.com/browse/JBEAP-20694
• https://issues.redhat.com/browse/JBEAP-20695
• https://issues.redhat.com/browse/JBEAP-20715
• https://issues.redhat.com/browse/JBEAP-20762
• https://issues.redhat.com/browse/JBEAP-20791
• https://issues.redhat.com/browse/JBEAP-20795
• https://issues.redhat.com/browse/JBEAP-20802
• https://issues.redhat.com/browse/JBEAP-20805
• https://issues.redhat.com/browse/JBEAP-20815
• https://issues.redhat.com/browse/JBEAP-20816
• https://issues.redhat.com/browse/JBEAP-20883
• https://issues.redhat.com/browse/JBEAP-20887
• https://issues.redhat.com/browse/JBEAP-20908
• https://issues.redhat.com/browse/JBEAP-20918
• https://issues.redhat.com/browse/JBEAP-20941
• https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0872.json
• https://access.redhat.com/security/cve/CVE-2020-8908
• https://www.cve.org/CVERecord?id=CVE-2020-8908
• https://nvd.nist.gov/vuln/detail/CVE-2020-8908
• https://access.redhat.com/security/cve/CVE-2020-10687
• https://bugzilla.redhat.com/show_bug.cgi?id=1785049
• https://www.cve.org/CVERecord?id=CVE-2020-10687
• https://nvd.nist.gov/vuln/detail/CVE-2020-10687
• https://access.redhat.com/security/cve/CVE-2020-28052
• https://www.cve.org/CVERecord?id=CVE-2020-28052
• https://nvd.nist.gov/vuln/detail/CVE-2020-28052
• https://access.redhat.com/security/cve/CVE-2020-35510
• https://www.cve.org/CVERecord?id=CVE-2020-35510
• https://nvd.nist.gov/vuln/detail/CVE-2020-35510
• https://access.redhat.com/security/cve/CVE-2021-20220
• https://www.cve.org/CVERecord?id=CVE-2021-20220
• https://nvd.nist.gov/vuln/detail/CVE-2021-20220
• https://access.redhat.com/security/cve/CVE-2021-20250
• https://www.cve.org/CVERecord?id=CVE-2021-20250
• https://nvd.nist.gov/vuln/detail/CVE-2021-20250