It was discovered that the Swing file chooser did not properly
restrict access to files. An untrusted Java application or applet
could possibly use this flaw to gain access to restricted files.
This only affected OpenJDK code used on Microsoft Windows platform. The OpenJDK packages shipped in Red Hat Enterprise Linux or Fedora were not affected by this issue.
Upstream OpenJDK commit: