{
  "schema_version": "1.7.0",
  "id": "RHSA-2021:4677",
  "related": [],
  "upstream": [
    "CVE-2021-3629",
    "CVE-2021-3717",
    "CVE-2021-20289",
    "CVE-2021-30129",
    "CVE-2021-37714"
  ],
  "published": "2024-09-20T15:04:59Z",
  "modified": "2026-06-29T10:38:21Z",
  "summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 8",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "affected": [
    {
      "package": {
        "name": "eap7-undertow",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-undertow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.2.12-2.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-wildfly"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.4.2-2.GA_redhat_00002.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly-javadocs",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-wildfly-javadocs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.4.2-2.GA_redhat_00002.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly-modules",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-wildfly-modules"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.4.2-2.GA_redhat_00002.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-atom-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-atom-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-cdi",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-cdi"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-client",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-client"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-crypto",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-crypto"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-jackson-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-jackson-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-jackson2-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-jackson2-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-jaxb-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-jaxb-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-jaxrs",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-jaxrs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-jettison-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-jettison-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-jose-jwt",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-jose-jwt"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-jsapi",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-jsapi"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-json-binding-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-json-binding-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-json-p-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-json-p-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-multipart-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-multipart-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-rxjava2",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-rxjava2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-spring",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-spring"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-validator-provider-11",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-validator-provider-11"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-resteasy-yaml-provider",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-resteasy-yaml-provider"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.15.2-1.Final_redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-apache-sshd",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-apache-sshd"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.7.0-1.redhat_00001.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jsoup",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:7.4::el8",
        "purl": "pkg:rpm/redhat/eap7-jsoup"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.14.2-1.redhat_00002.1.el8eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2021:4677"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995259"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-21308"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-21974"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22208"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22213"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22254"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22255"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22344"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22347"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22365"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22367"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22435"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22462"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22487"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22493"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22494"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22500"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22504"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22515"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22517"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-22522"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1981527"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/security/updates/classification/#moderate"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935927"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1991305"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1977362"
    },
    {
      "type": "ADVISORY",
      "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4677.json"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-3629"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3629"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3629"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-3717"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3717"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3717"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-20289"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20289"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20289"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-30129"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30129"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30129"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-37714"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37714"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37714"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c"
    }
  ]
}