JBoss Enterprise Application Platform 7.4 Update 12 Release Notes
Updated
In order to better meet customer expectations, micro releases for JBoss EAP 7 have been discontinued and replaced with updates delivered on a repeating schedule.
Each new update will contain a number of bug fixes for customer reported issues and potentially a number of security fixes. We expect that the updates will substantially reduce the number of individual patches that we produce and that customers must manage to keep their installations up to date.
For more information see the following Red Hat Knowledgebase articles: Maintenance Release Changes in EAP 6.2+ and Updated Patch Management with EAP 6.2+
This update includes all fixes and changes from JBoss Enterprise Application Platform 7.4 Update 11
Download This content is not included.JBoss Enterprise Application Platform 7.4 Update 12
This update includes fixes for the following security related issues:
| ID | Component | Impact | Summary |
|---|---|---|---|
| CVE-2023-1436 | Server | Moderate | jettison: Uncontrolled Recursion in JSONArray |
| CVE-2021-46877 | Server | Moderate | jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode |
| CVE-2023-3223 | Undertow | Important | undertow: OutOfMemoryError due to @MultipartConfig handling |
This update includes the following bug fixes or changes:
| ID | Component | Summary |
|---|---|---|
| This content is not included.JBEAP-6180 | ActiveMQ | Artemis is logging warnings during server shut down |
| This content is not included.JBEAP-24841 | Clustering | Session is not getting expired even after Session timeout time. In EAP 7.4 Update 10 with JDK 1.8 |
| This content is not included.JBEAP-24844 | Clustering | This content is not included.WFLY-16030 - Infinispan subsystem custom to use modules configuration attribute as List of modules |
| This content is not included.JBEAP-24742 | EJB | This content is not included.ELY-2535 - EJB lookups between two deployments doesn't work |
| This content is not included.JBEAP-24839 | EJB | This content is not included.WFLY-17807 - Invalid @Schedule expression results in infinite loop |
| This content is not included.JBEAP-24824 | EJB | This content is not included.WFLY-17957 - EJB timer schedule increment 0 should be considered as single value |
| This content is not included.JBEAP-24818 | EJB | This content is not included.EJBCLIENT-493 - Verbose DISCOVERY_ADDITIONAL_TIMEOUT logging during EJB discovery |
| This content is not included.JBEAP-24691 | EJB | French translation bug in WLFYEJB0330 message: timer has expired != La minuterie n'a pas expiré |
| This content is not included.JBEAP-24866 | EJB | This content is not included.WFLY-18040 - EJB: make deployments share client context if only static interceptors are used |
| This content is not included.JBEAP-24734 | Hibernate | Content from hibernate.atlassian.net is not included.HHH-15602 - ByteBuddy enhancement generates faulty code with many-to-many associations |
| This content is not included.JBEAP-24791 | Hibernate | Content from hibernate.atlassian.net is not included.HHH-16485 - Insert ordering doesn't consider root entity names |
| This content is not included.JBEAP-24992 | Insights | Generated report from Insights is sometimes invalid JSON |
| This content is not included.JBEAP-24735 | JCA | Annotations in resource adapter module are not processed |
| This content is not included.JBEAP-24688 | JCA | JBoss EAP does not log exceptions thrown during a failed deployment of a resource adapter module |
| This content is not included.JBEAP-24860 | Management | This content is not included.WFCORE-6339 - Define remote name as origin if none is defined |
| This content is not included.JBEAP-24846 | Management | This content is not included.WFCORE-6351 - The publish-configuration command doesn't throw an error when the git location is invalid |
| This content is not included.JBEAP-24741 | Scripts | enable elytron example cli scripts not setting security=elytron on iiop subsystem |
| This content is not included.JBEAP-24752 | Security | Picketlink causing ConcurrentModificationException while deploying the application from DocumentBuilderImpl.setFeatures |
| This content is not included.JBEAP-24669 | Security | applicationSSC is required when running enable-elytron-se17.cli / enable-elytron-se17-domain.cli [details] |
| This content is not included.JBEAP-24716 | Server | This content is not included.WFCORE-6290 - Failure to handle errors loading process-uuid file |
| This content is not included.JBEAP-23722 | Undertow | This content is not included.UNDERTOW-2241 Undertow write-timeout can cause missing the last zero-length chunk in long polling [details] |
| This content is not included.JBEAP-24545 | Undertow | This content is not included.UNDERTOW-2243 - Eager flush/close on content length response prevents POST from finishing |
| This content is not included.JBEAP-24328 | Undertow | This content is not included.UNDERTOW-2251 / This content is not included.UNDERTOW-2258 - protocol error with HTTP/2 and Expect: 100-continue part 2 |
| This content is not included.JBEAP-24946 | Undertow | This content is not included.UNDERTOW-2267 - Fix change in behaviour of Servlet.init() method when loadOnStartup is required [details] |
| This content is not included.JBEAP-25198 | Undertow | Server responds with chunked transfer even for short data from deployment |
| This content is not included.JBEAP-25053 | Undertow | This content is not included.UNDERTOW-2281 - Undertow HTTP2 breaks protocol specification when client misbehaves |
| This content is not included.JBEAP-24733 | Web Console | This content is not included.HAL-1848 - Web console: Disabled datasource throws error in Runtime |
| This content is not included.JBEAP-24823 | XML Frameworks | Content from issues.apache.org is not included.XALANJ-2419 - Astral characters written as a pair of NCRs with the surrogate scalar values when using UTF-8 |
Installation
Archive / zip / installer based installations
Note: This update zip should only be applied to installer or zip-based installations.
To apply this update using the CLI on Unix-based systems, run the following command from JBOSS_HOME:
bin/jboss-cli.sh "patch apply path/to/jboss-eap-7.4.12-patch.zip"
To apply this update using the CLI on Windows-based systems, run the following command from JBOSS_HOME:
bin\jboss-cli.bat "patch apply path\to\jboss-eap-7.4.12-patch.zip"
These commands will apply the update to the installation that contains the CLI script. Other scenarios and use of the management console are covered in the JBoss EAP 7.4 Patching And Upgrading Guide
RPM installations
See the documentation: Updating an RPM installation
OpenShift Container installations
Update the containers to use the This content is not included.latest tag, to be current on JBoss EAP bug fixes as well as OpenJDK and RHEL fixes.
This content is not included.Known Issues
Notes
- JBoss EAP 7.4 Update 13+ contains some bug fixes that did not make it into EAP 8.0 GA, it is recommended you move to EAP 8.0 latest Update
- Red Hat Insights is available for JBoss EAP 7.4 Update 11+ and accessible on the This content is not included.Red Hat Hybrid Cloud Console, see more details.
- Helm Chart for EAP 7.4 Updates
- The EAP natives for s390x platform (IBM zSeries) are only supported in the OpenShift environment on IBM zSeries, i.e bare metal installations on IBM zSeries are not supported.
- Some JBoss EAP image templates depend on other products that may not have a s390x build, see here for more details
- The Helm Chart for JBoss EAP 7.4 / JBoss EAP XP 3 allows to build and deploy applications on OpenShift using Helm package manager
- The IBM WebSphere MQ broker was updated to 9.2 for integration testing, see the Red Hat JBoss Enterprise Application Platform (EAP) 7 Tested Integrations for more details.
- Hibernate Search 5 APIs Deprecated in JBoss EAP 7.4 that will be changed in EAP 8 / Hibernate 6
- The RHSSO Galleon Layer is deprecated in JBoss EAP 7.4, see more details.
- JBoss EAP 7.4 Update 8+ now supports OpenJDK 17 / Oracle JDK 17, see configuration changes needed here.
- Deprecated in Red Hat Enterprise Application Platform (EAP) 7
- jndi-name has been required for admin-object definitions as per the schema, the server will require it to be specified or will result in an error, see more details here
Category
Components
Article Type