A flaw was found in the way the Hotspot JVM handled phantom references. An untrusted Java application or applet could use this flaw to corrupt JVM memory and, possibly, execute arbitrary code, bypassing Java sandbox restrictions. This fix corrects the patch for CVE-2015-0395 (bug 1183031) fixed in Jan 2015 CPU.
Public now via Oracle Critical Patch Update - April 2015. Fixed in Oracle Java SE 6u95, 7u79, and 8u45. External References: http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA
This issue has been addressed in the following products: Red Hat Enterprise Linux 5 Via RHSA-2015:0807 https://rhn.redhat.com/errata/RHSA-2015-0807.html
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Via RHSA-2015:0809 https://rhn.redhat.com/errata/RHSA-2015-0809.html
This issue has been addressed in the following products: Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Via RHSA-2015:0808 https://rhn.redhat.com/errata/RHSA-2015-0808.html
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Via RHSA-2015:0806 https://rhn.redhat.com/errata/RHSA-2015-0806.html
This issue was fixed in IcedTea6 1.13.7 and IcedTea7 2.5.5: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2015-April/031449.html http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2015-April/031450.html Upstream OpenJDK commit: http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot/rev/35c7330b68e2
This issue has been addressed in the following products: Oracle Java for Red Hat Enterprise Linux 7 Oracle Java for Red Hat Enterprise Linux 6 Via RHSA-2015:0854 https://rhn.redhat.com/errata/RHSA-2015-0854.html
This issue has been addressed in the following products: Oracle Java for Red Hat Enterprise Linux 5 Oracle Java for Red Hat Enterprise Linux 7 Oracle Java for Red Hat Enterprise Linux 6 Via RHSA-2015:0857 https://rhn.redhat.com/errata/RHSA-2015-0857.html
This issue has been addressed in the following products: Oracle Java for Red Hat Enterprise Linux 5 Oracle Java for Red Hat Enterprise Linux 7 Oracle Java for Red Hat Enterprise Linux 6 Via RHSA-2015:0858 https://rhn.redhat.com/errata/RHSA-2015-0858.html