RHSA-2016:0040Critical
Red Hat Security Advisory: Red Hat JBoss Operations Network 3.1.2 Hotfix 11 update
🔗 CVE IDs covered (1)
📋 Description
CVE-2015-7501 — apache-commons-collections: InvokerTransformer code execution during deserialisation
🎯 Affected products1
- Red Hat JBoss Operations Network 3.1
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing JBoss Operations Network installation (including its databases, applications, configuration files, the JBoss Operations Network server's file system directory, and so on). Note: This update provides fixes for the server, agent, and core GUI components of Red Hat JBoss Operations Network. It is recommended to apply all the patches provided by this update.
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2016:0040
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=em&downloadType=securityPatches&version=3.1.2
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1279330
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0040.json