Red Hat Security Advisory: Open Liberty 21.0.0.6 Runtime security update
Affects Red HatSource GCVE Database
0
Mentioned vulnerabilities
Severity
HighRated by Threat Radar
Data as of 14 Nov 2026, 17:50 UTC
What to do
AI-suggested
Users should upgrade to Open Liberty 21.0.0.6, which includes the security fix for CVE-2021-26296. This release replaces Open Liberty 21.0.0.3. No additional mitigation steps are indicated beyond applying this update.
Description
Open Liberty 21.0.0.6 is a security update release that addresses a cross-site request forgery (CSRF) vulnerability in Apache MyFaces (CVE-2021-26296). This release replaces Open Liberty 21.0.0.3 and includes security fixes and enhancements.
References
- access.redhat.com/errata/RHSA-2021:2439 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=open.liberty&downloadType=distributions&version=21.0.0.6 (opens in a new tab)
- ibm.com/support/pages/node/6441433 (opens in a new tab)
- access.redhat.com/articles/4544981 (opens in a new tab)
- access.redhat.com/products/open-liberty (opens in a new tab)
- access.redhat.com/documentation/en-us/open_liberty/ (opens in a new tab)
- issues.redhat.com/browse/IBMRT-133 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2439.json (opens in a new tab)
Community reviews
Loading reviews…