What is RHSA-2016:0042?

RHSA-2016:0042 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.5 update

Which CVE IDs does RHSA-2016:0042 cover?

RHSA-2016:0042 covers the following CVE IDs: CVE-2015-0250. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2016:0042?

RHSA-2016:0042 affects 1 product, including: Red Hat JBoss BPMS 6.1.

RHSA-2016:0042Medium

Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.5 update

Vendor

Red Hat Product Security

Published

January 14, 2016

Last Modified

November 5, 2026

🔗 CVE IDs covered (1)

CVE-2015-0250 →

📋 Description

CVE-2015-0250 — batik: XML External Entity (XXE) injection in SVG parsing

🎯 Affected products1

Red Hat JBoss BPMS 6.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. It is recommended to halt the server by stopping the JBoss Application Server process before installing this update; after installing the update, restart the server by starting the JBoss Application Server process.

🔗 References (5)

selfhttps://access.redhat.com/errata/RHSA-2016:0042
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=bpm.suite&downloadType=securityPatches&version=6.1.0
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1203762
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0042.json