What is RHSA-2015:2502?

RHSA-2015:2502 is a security advisory published by Red Hat Product Security with Critical severity. Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 and 6.5.1 commons-collections security update

Which CVE IDs does RHSA-2015:2502 cover?

RHSA-2015:2502 covers the following CVE IDs: CVE-2015-7501. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2015:2502?

RHSA-2015:2502 affects 2 products, including: Red Hat JBoss Data Grid 6.4; Red Hat JBoss Data Grid 6.5.

RHSA-2015:2502Critical

Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 and 6.5.1 commons-collections security update

Vendor

Red Hat Product Security

Published

November 20, 2015

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2015-7501 →

📋 Description

CVE-2015-7501 — apache-commons-collections: InvokerTransformer code execution during deserialisation

🎯 Affected products2

Red Hat JBoss Data Grid 6.4
Red Hat JBoss Data Grid 6.5

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Data Grid installation.

🔗 References (7)

selfhttps://access.redhat.com/errata/RHSA-2015:2502
externalhttps://access.redhat.com/security/updates/classification/#critical
externalhttps://access.redhat.com/solutions/2045023
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.grid&downloadType=securityPatches&version=6.5.1
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=data.grid&downloadType=securityPatches&version=6.4.1
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1279330
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2502.json