What is RHSA-2015:2578?

RHSA-2015:2578 is a security advisory published by Red Hat Product Security with Critical severity. Red Hat Security Advisory: Red Hat JBoss BRMS 6.1.0 commons-collections security update

Which CVE IDs does RHSA-2015:2578 cover?

RHSA-2015:2578 covers the following CVE IDs: CVE-2015-7501. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2015:2578?

RHSA-2015:2578 affects 1 product, including: Red Hat JBoss BRMS 6.1.

RHSA-2015:2578Critical

Red Hat Security Advisory: Red Hat JBoss BRMS 6.1.0 commons-collections security update

Vendor

Red Hat Product Security

Published

December 8, 2015

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2015-7501 →

📋 Description

CVE-2015-7501 — apache-commons-collections: InvokerTransformer code execution during deserialisation

🎯 Affected products1

Red Hat JBoss BRMS 6.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss BRMS installation (including its databases, applications, configuration files, and so on). Note that it is recommended to halt the Red Hat JBoss BRMS server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the Red Hat JBoss BRMS server by starting the JBoss Application Server process.

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2015:2578
externalhttps://access.redhat.com/security/updates/classification/#critical
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=brms&downloadType=securityPatches&version=6.1.0
externalhttps://access.redhat.com/solutions/2045023
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1279330
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2578.json