CVE-2015-3149
Fixed in a distro release EPSS <1%
The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | java-1.8.0-openjdk | 1:1.8.0.51-0.b16.el6_6 |
| Red Hat Enterprise Linux 6 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.51-0.b16.el6_6 |
| Red Hat Enterprise Linux 6 | java-1.8.0-openjdk-demo | 1:1.8.0.51-0.b16.el6_6 |
| Red Hat Enterprise Linux 6 | java-1.8.0-openjdk-devel | 1:1.8.0.51-0.b16.el6_6 |
| Red Hat Enterprise Linux 6 | java-1.8.0-openjdk-headless | 1:1.8.0.51-0.b16.el6_6 |
| Red Hat Enterprise Linux 6 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-0.b16.el6_6 |
| Red Hat Enterprise Linux 6 | java-1.8.0-openjdk-src | 1:1.8.0.51-0.b16.el6_6 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.ael7b_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-accessibility | 1:1.8.0.51-1.b16.ael7b_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.51-1.b16.ael7b_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.ael7b_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-demo | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.ael7b_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-devel | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.ael7b_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-headless | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-javadoc | 1:1.8.0.51-1.b16.ael7b_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.el7_1 |
| Red Hat Enterprise Linux 7 | java-1.8.0-openjdk-src | 1:1.8.0.51-1.b16.ael7b_1 |