A flaw was found in the way the Hotspot JVM code compiler generated optimized code. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
Public now via Oracle Critical Patch Update - January 2015. Fixed in Oracle Java SE 8u31. External References: http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html#AppendixJAVA
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2015:0069 https://rhn.redhat.com/errata/RHSA-2015-0069.html
Upstream OpenJDK commit: http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot/rev/9906d432d6db
This issue has been addressed in the following products: Oracle Java for Red Hat Enterprise Linux 6 Via RHSA-2015:0080 https://rhn.redhat.com/errata/RHSA-2015-0080.html