CVE-2016-0448

Name	CVE-2016-0448
Description	Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-410-1, DSA-3458-1, DSA-3465-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
openjdk-8 (PTS)	sid	8u432-b06-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
openjdk-6	source	squeeze	6b38-1.13.10-1~deb6u1	DLA-410-1
openjdk-6	source	wheezy	6b38-1.13.10-1~deb7u1	DSA-3465-1
openjdk-6	source	(unstable)	(unfixed)
openjdk-7	source	wheezy	7u95-2.6.4-1~deb7u1	DSA-3458-1
openjdk-7	source	jessie	7u95-2.6.4-1~deb8u1	DSA-3458-1
openjdk-7	source	(unstable)	7u95-2.6.4-1
openjdk-8	source	(unstable)	8u72-b15-1

https://bugzilla.redhat.com/show_bug.cgi?id=1299385#c4