- Vulnerability/
- RHSA-2021:3140
RHSA-2021:3140: Moderate: Red Hat Fuse 7.9.0 release and security update
First published: Wed Aug 11 2021(Updated: )
This release of Red Hat Fuse 7.9.0 serves as a replacement for Red Hat Fuse 7.8, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.<br>Security Fix(es):<br><li> hawtio-osgi (CVE-2017-5645)</li> <li> prometheus-jmx-exporter: snakeyaml (CVE-2017-18640)</li> <li> apache-commons-compress (CVE-2019-12402)</li> <li> karaf-transaction-manager-narayana: netty (CVE-2019-16869, CVE-2019-20445)</li> <li> tomcat (CVE-2020-1935, CVE-2020-1938, CVE-2020-9484, CVE-2020-13934, CVE-2020-13935, CVE-2020-11996)</li> <li> spring-cloud-config-server (CVE-2020-5410)</li> <li> velocity (CVE-2020-13936)</li> <li> httpclient: apache-httpclient (CVE-2020-13956)</li> <li> shiro-core: shiro (CVE-2020-17510)</li> <li> hibernate-core (CVE-2020-25638)</li> <li> wildfly-openssl (CVE-2020-25644)</li> <li> jetty (CVE-2020-27216, CVE-2021-28165)</li> <li> bouncycastle (CVE-2020-28052)</li> <li> wildfly (CVE-2019-14887, CVE-2020-25640)</li> <li> resteasy-jaxrs: resteasy (CVE-2020-1695)</li> <li> camel-olingo4 (CVE-2020-1925)</li> <li> springframework (CVE-2020-5421)</li> <li> jsf-impl: Mojarra (CVE-2020-6950)</li> <li> resteasy (CVE-2020-10688)</li> <li> hibernate-validator (CVE-2020-10693)</li> <li> wildfly-elytron (CVE-2020-10714)</li> <li> undertow (CVE-2020-10719)</li> <li> activemq (CVE-2020-13920)</li> <li> cxf-core: cxf (CVE-2020-13954)</li> <li> fuse-apicurito-operator-container: golang.org/x/text (CVE-2020-14040)</li> <li> jboss-ejb-client: wildfly (CVE-2020-14297)</li> <li> xercesimpl: wildfly (CVE-2020-14338)</li> <li> xnio (CVE-2020-14340)</li> <li> flink: apache-flink (CVE-2020-17518)</li> <li> resteasy-client (CVE-2020-25633)</li> <li> xstream (CVE-2020-26258)</li> <li> mybatis (CVE-2020-26945)</li> <li> pdfbox (CVE-2021-27807, CVE-2021-27906)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1443635
- https://bugzilla.redhat.com/show_bug.cgi?id=1730462
- https://bugzilla.redhat.com/show_bug.cgi?id=1758619
- https://bugzilla.redhat.com/show_bug.cgi?id=1764640
- https://bugzilla.redhat.com/show_bug.cgi?id=1772008
- https://bugzilla.redhat.com/show_bug.cgi?id=1785376
- https://bugzilla.redhat.com/show_bug.cgi?id=1790309
- https://bugzilla.redhat.com/show_bug.cgi?id=1798509
- https://bugzilla.redhat.com/show_bug.cgi?id=1805006
- https://bugzilla.redhat.com/show_bug.cgi?id=1805501
- https://bugzilla.redhat.com/show_bug.cgi?id=1806398
- https://bugzilla.redhat.com/show_bug.cgi?id=1806835
- https://bugzilla.redhat.com/show_bug.cgi?id=1814974
- https://bugzilla.redhat.com/show_bug.cgi?id=1825714
- https://bugzilla.redhat.com/show_bug.cgi?id=1828459
- https://bugzilla.redhat.com/show_bug.cgi?id=1838332
- https://bugzilla.redhat.com/show_bug.cgi?id=1845626
- https://bugzilla.redhat.com/show_bug.cgi?id=1851420
- https://bugzilla.redhat.com/show_bug.cgi?id=1853595
- https://bugzilla.redhat.com/show_bug.cgi?id=1853652
- https://bugzilla.redhat.com/show_bug.cgi?id=1857024
- https://bugzilla.redhat.com/show_bug.cgi?id=1857040
- https://bugzilla.redhat.com/show_bug.cgi?id=1860054
- https://bugzilla.redhat.com/show_bug.cgi?id=1860218
- https://bugzilla.redhat.com/show_bug.cgi?id=1879042
- https://bugzilla.redhat.com/show_bug.cgi?id=1880101
- https://bugzilla.redhat.com/show_bug.cgi?id=1881158
- https://bugzilla.redhat.com/show_bug.cgi?id=1881353
- https://bugzilla.redhat.com/show_bug.cgi?id=1881637
- https://bugzilla.redhat.com/show_bug.cgi?id=1885485
- https://bugzilla.redhat.com/show_bug.cgi?id=1886587
- https://bugzilla.redhat.com/show_bug.cgi?id=1887257
- https://bugzilla.redhat.com/show_bug.cgi?id=1891132
- https://bugzilla.redhat.com/show_bug.cgi?id=1898235
- https://bugzilla.redhat.com/show_bug.cgi?id=1903727
- https://bugzilla.redhat.com/show_bug.cgi?id=1908832
- https://bugzilla.redhat.com/show_bug.cgi?id=1912881
- https://bugzilla.redhat.com/show_bug.cgi?id=1913312
- https://bugzilla.redhat.com/show_bug.cgi?id=1937440
- https://bugzilla.redhat.com/show_bug.cgi?id=1941050
- https://bugzilla.redhat.com/show_bug.cgi?id=1941055
- https://bugzilla.redhat.com/show_bug.cgi?id=1945714
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.fuse&version=7.9.0
- https://access.redhat.com/documentation/en-us/red_hat_fuse/7.9/
- https://access.redhat.com/errata/RHSA-2021:3140 (Advisory)
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2021:3140
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type