What is RHSA-2015:2579?

RHSA-2015:2579 is a security advisory published by Red Hat Product Security with Critical severity. Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.0 commons-collections security update

Which CVE IDs does RHSA-2015:2579 cover?

RHSA-2015:2579 covers the following CVE IDs: CVE-2015-7501. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2015:2579?

RHSA-2015:2579 affects 1 product, including: Red Hat JBoss BPMS 6.0.

RHSA-2015:2579Critical

Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.0 commons-collections security update

Vendor

Red Hat Product Security

Published

December 8, 2015

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2015-7501 →

📋 Description

CVE-2015-7501 — apache-commons-collections: InvokerTransformer code execution during deserialisation

🎯 Affected products1

Red Hat JBoss BPMS 6.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the updates). Before applying the updates, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. It is recommended to halt the server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the server by starting the JBoss Application Server process.

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2015:2579
externalhttps://access.redhat.com/security/updates/classification/#critical
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite&downloadType=securityPatches&version=6.1.0
externalhttps://access.redhat.com/solutions/2045023
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1279330
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2579.json