Skip to content
OpenAdvisories
Unscored RHSA-2015:1052 1 CVE

Red Hat Security Advisory: thermostat1 security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1 0:2.0-60.9.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-apache-commons-fileupload 0:1.3-60.7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-apache-commons-fileupload-javadoc 0:1.3-60.7.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-jcommon 0:1.0.18-60.5.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-jcommon-javadoc 0:1.0.18-60.5.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-jcommon-xml 0:1.0.18-60.5.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-jfreechart 0:1.0.14-60.5.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-jfreechart-javadoc 0:1.0.14-60.5.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-jline2 0:2.10-60.6.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-jline2-javadoc 0:2.10-60.6.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-netty 0:3.6.3-60.4.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-netty-javadoc 0:3.6.3-60.4.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-runtime 0:2.0-60.9.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-scldevel 0:2.0-60.9.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-thermostat 0:1.2.0-60.10.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-thermostat-debuginfo 0:1.2.0-60.10.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-thermostat-javadoc 0:1.2.0-60.10.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 thermostat1-thermostat-webapp 0:1.2.0-60.10.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1 0:2.0-70.9.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-apache-commons-fileupload 0:1.3-70.3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-apache-commons-fileupload-javadoc 0:1.3-70.3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-jcommon 0:1.0.18-70.5.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-jcommon-javadoc 0:1.0.18-70.5.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-jcommon-xml 0:1.0.18-70.5.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-jfreechart 0:1.0.14-70.4.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-jfreechart-javadoc 0:1.0.14-70.4.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-jline2 0:2.10-70.3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-jline2-javadoc 0:2.10-70.3.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-netty 0:3.6.3-70.4.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-netty-javadoc 0:3.6.3-70.4.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-runtime 0:2.0-70.9.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-scldevel 0:2.0-70.9.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-thermostat 0:1.2.0-70.12.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-thermostat-debuginfo 0:1.2.0-70.12.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-thermostat-javadoc 0:1.2.0-70.12.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 thermostat1-thermostat-webapp 0:1.2.0-70.12.el7

Vulnerabilities 1

  • Unscored —
    CVE-2015-3201

    Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1221989
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1052.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3201