CVE-2016-0448
Published: 20 January 2016
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.
Priority
Medium
Status
| Package | Release | Status |
|---|---|---|
|
openjdk-6 Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was released [6b38-1.13.10-0ubuntu0.14.04.1])
|
|
|
openjdk-7 Launchpad, Ubuntu, Debian |
Upstream |
Needs triage
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Does not exist
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was released [7u95-2.6.4-0ubuntu0.14.04.1])
|
|
|
openjdk-8 Launchpad, Ubuntu, Debian |
Upstream |
Released
(8u72-b15-1)
|
| Ubuntu 16.04 LTS (Xenial Xerus) |
Not vulnerable
(8u72-b15-1)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
Patches: Upstream: http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/de1c23d1e964 |
||