What is RHSA-2015:2548?

RHSA-2015:2548 is a security advisory published by Red Hat Product Security with Critical severity. Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.1 commons-collections security update

Which CVE IDs does RHSA-2015:2548 cover?

RHSA-2015:2548 covers the following CVE IDs: CVE-2015-7501. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2015:2548?

RHSA-2015:2548 affects 1 product, including: Red Hat JBoss Web Server 3.0.

RHSA-2015:2548Critical

Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.1 commons-collections security update

Vendor

Red Hat Product Security

Published

December 4, 2015

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2015-7501 →

📋 Description

CVE-2015-7501 — apache-commons-collections: InvokerTransformer code execution during deserialisation

🎯 Affected products1

Red Hat JBoss Web Server 3.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied, and back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2015:2548
externalhttps://access.redhat.com/security/updates/classification/#critical
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=webserver&version=3.0.1
externalhttps://access.redhat.com/solutions/2045023
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1279330
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2548.json