CVE-2016-0494

Published: 20 January 2016

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Priority

Medium

Status

Package Release Status
icu
Launchpad, Ubuntu, Debian
Upstream
Released (57.1-4)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (55.1-7ubuntu0.1)
Ubuntu 14.04 ESM (Trusty Tahr)
Released (52.1-3ubuntu0.5)
Patches:
Upstream: http://bugs.icu-project.org/trac/changeset/38141 (possibly incomplete)
openjdk-6
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [6b38-1.13.10-0ubuntu0.14.04.1])
openjdk-7
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 16.04 ESM (Xenial Xerus) Does not exist

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [7u95-2.6.4-0ubuntu0.14.04.1])
openjdk-8
Launchpad, Ubuntu, Debian
Upstream
Released (8u72-b15-1)
Ubuntu 16.04 ESM (Xenial Xerus) Not vulnerable
(8u72-b15-1)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist

Patches:
Upstream: http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/f556d4c82ef1