CVE-2015-0478

Name	CVE-2015-0478
Description	Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-213-1, DSA-3234-1, DSA-3235-1, DSA-3316-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openjdk-8 (PTS)	sid	8u432-b06-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
openjdk-6	source	squeeze	6b35-1.13.7-1~deb6u1		DLA-213-1
openjdk-6	source	wheezy	6b35-1.13.7-1~deb7u1		DSA-3234-1
openjdk-6	source	(unstable)	6b35-1.13.7-1
openjdk-7	source	wheezy	7u79-2.5.6-1~deb7u1		DSA-3316-1
openjdk-7	source	jessie	7u79-2.5.6-1~deb8u1		DSA-3316-1
openjdk-7	source	(unstable)	7u79-2.5.5-1
openjdk-8	source	(unstable)	8u45-b14-1