{"id":"CVE-2016-0475","aliases":["EUVD-2016-0510","GHSA-cjg9-h8wq-j253","MGASA-2016-0048","RHSA-2016:0049","RHSA-2016:0050","RHSA-2016:0055","RHSA-2016:0098","SUSE-SU-2016:0256-1","SUSE-SU-2016:0390-1","UBUNTU-CVE-2016-0475","openSUSE-SU-2024:10197-1"],"status":"published","title":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java...","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.03663,"percentile":0.89689,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-01-21T02:00:00Z","modified":"2026-10-15T16:17:12Z","affected":[{"source":"osv","ecosystem":"Mageia:5","package":"copy-jdk-configs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-1.1.mga5"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:5","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.72-1.b15.1.mga5"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:5","package":"lua-lunit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5-1.mga5"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:5","package":"lua-posix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33.3.1-1.mga5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-2.b15.el7_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1.b15.el6_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el6_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el6_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el6_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el6_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el6_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el6_7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.71-1jpp.1.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.2.10-1jpp.1.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.72-3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.72-3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.72-3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr2.10-7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr2.10-7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr2.10-7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.111-1.1"}]}],"bundled":83}],"products":[{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle","product":"jrockit"}],"references":[{"url":"http://www.securitytracker.com/id/1034715","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201610-08","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0049.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10148","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0055.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0050.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0475","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cjg9-h8wq-j253"},{"url":"https://advisories.mageia.org/MGASA-2016-0048.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17576","tags":["report"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html#AppendixJAVA","tags":["web","article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-0049.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0049","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299441","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0049.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7575","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7575","tags":["advisory"]},{"url":"http://www.mitls.org/pages/attacks/SLOTH","tags":["article"]},{"url":"https://access.redhat.com/articles/2112261","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0402","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0402","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0448","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0475","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0483","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0483","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0494","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0050","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0050.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0055","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281756","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0055.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8126","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8472","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0098","tags":["advisory"]},{"url":"http://www.ibm.com/developerworks/java/jdk/alerts/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302689","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0098.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5041","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160256-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/960996","tags":["report"]},{"url":"https://bugzilla.suse.com/962743","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0494","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160390-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/960402","tags":["report"]},{"url":"https://bugzilla.suse.com/963937","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8472","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-0475","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5597","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-0475","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","status":"published","published":"2016-01-21T02:00:00Z","modified":"2026-10-15T15:15:49.671Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2016-0510","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","status":"published","published":"2016-01-21T02:00:00Z","modified":"2026-10-15T15:15:49Z","updated_at":"2026-11-02T17:00:13.808912Z"}],"ghsa":[{"id":"GHSA-cjg9-h8wq-j253","title":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java...","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","status":"published","published":"2022-05-13T01:17:09Z","modified":"2023-02-01T05:04:57Z","updated_at":"2026-11-02T14:50:12.520785Z"}],"nvd":[{"id":"CVE-2016-0475","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","status":"published","published":"2016-01-21T03:00:23.57Z","modified":"2026-10-15T16:17:12.213Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:21.143462Z"}],"osv":[{"id":"MGASA-2016-0048","title":"Updated java-1.8.0-openjdk/copy-jdk-configs/lua-lunit/lua-posix packages fix security vulnerability","description":"An out-of-bounds write flaw was found in the JPEG image format decoder in\nthe AWT component in OpenJDK. A specially crafted JPEG image could cause\na Java application to crash or, possibly execute arbitrary code. An\nuntrusted Java application or applet could use this flaw to bypass Java\nsandbox restrictions (CVE-2016-0483).\n\nAn integer signedness issue was found in the font parsing code in the 2D\ncomponent in OpenJDK. A specially crafted font file could possibly cause\nthe Java Virtual Machine to execute arbitrary code, allowing an untrusted\nJava application or applet to bypass Java sandbox restrictions\n(CVE-2016-0494).\n\nIt was discovered that the password-based encryption (PBE) implementation\nin the Libraries component in OpenJDK used an incorrect key length. This\ncould, in certain cases, lead to generation of keys that were weaker than\nexpected (CVE-2016-0475).\n\nIt was discovered that the JAXP component in OpenJDK did not properly\nenforce the totalEntitySizeLimit limit. An attacker able to make a Java\napplication process a specially crafted XML file could use this flaw to\nmake the application consume an excessive amount of memory\n(CVE-2016-0466).\n\nA flaw was found in the way TLS 1.2 could use the MD5 hash function for\nsigning ServerKeyExchange and Client Authentication packets during a TLS\nhandshake. A man-in-the-middle attacker able to force a TLS connection to\nuse the MD5 hash function could use this flaw to conduct collision attacks\nto impersonate a TLS server or an authenticated TLS client\n(CVE-2015-7575).\n\nMultiple flaws were discovered in the Networking and JMX components in\nOpenJDK. An untrusted Java application or applet could use these flaws to\nbypass certain Java sandbox restrictions (CVE-2016-0402, CVE-2016-0448).\n\nThis update also required the addition of a new package, copy-jdk-configs,\nand a patch to the chkconfig package which adds the --family option to the\nalternatives command.  Both of these are used by scriplets in the update\njava-1.8.0-openjdk packages.\n","status":"published","published":"2016-02-05T17:26:09Z","modified":"2026-04-16T06:23:53.316569544Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10197-1","title":"java-1_8_0-openjdk-1.8.0.111-1.1 on GA media","description":"These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:43.579228Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2016:0049","title":"Red Hat Security Advisory: java-1.8.0-openjdk security update","status":"published","published":"2024-09-13T12:26:31Z","modified":"2026-08-05T10:03:35Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0050","title":"Red Hat Security Advisory: java-1.8.0-openjdk security update","status":"published","published":"2024-09-13T12:26:37Z","modified":"2026-08-05T10:03:36Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0055","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-13T12:26:30Z","modified":"2026-08-05T10:03:38Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2016:0098","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T12:26:37Z","modified":"2026-08-05T10:03:39Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2016:0256-1","title":"Security update for java-1_8_0-openjdk","description":"java-1_8_0-openjdk was updated to version 7u95 to fix several security issues. (bsc#962743)\n    \nThe following vulnerabilities were fixed:\n\n- CVE-2015-7575: Further reduce use of MD5 (SLOTH) (bsc#960996)\n- CVE-2015-8126: Vulnerability in the AWT component related to splashscreen displays\n- CVE-2015-8472: Vulnerability in the AWT component, addressed by same fix\n- CVE-2016-0402: Vulnerability in the Networking component related to URL processing\n- CVE-2016-0448: Vulnerability in the JMX comonent related to attribute processing\n- CVE-2016-0466: Vulnerability in the JAXP component, related to limits\n- CVE-2016-0483: Vulnerability in the AWT component related to image decoding\n- CVE-2016-0494: Vulnerability in 2D component related to font actions\n","status":"published","published":"2016-01-27T10:55:41Z","modified":"2026-02-04T02:44:38.492087Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0390-1","title":"Security update for java-1_8_0-ibm","description":"\nThis update for java-1_8_0-ibm fixes the following security issues by updating to 8.0-2.10 (bsc#963937):\n\n- CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances\n- CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials\n- CVE-2015-8126: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2015-8472: buffer overflow in libpng caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions\n- CVE-2016-0402: An unspecified vulnerability related to the Networking component has no confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0448: An unspecified vulnerability related to the JMX component could allow a remote attacker to obtain sensitive information\n- CVE-2016-0466: An unspecified vulnerability related to the JAXP component could allow a remote attacker to cause a denial of service\n- CVE-2016-0475: An unspecified vulnerability related to the Libraries component has partial confidentiality impact, partial integrity impact, and no availability impact\n- CVE-2016-0483: An unspecified vulnerability related to the AWT component has complete confidentiality impact, complete integrity impact, and complete availability impact\n- CVE-2016-0494: An unspecified vulnerability related to the 2D component has complete confidentiality impact, complete integrity impact, and complete availability impact\n\nThe following bugs were fixed:\n\n- bsc#960402: resolve package conflicts in devel package\n","status":"published","published":"2016-02-09T10:02:25Z","modified":"2026-02-04T03:43:49.278811Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2016-0475","description":"Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.","status":"withdrawn","published":"2016-01-21T03:00:00Z","modified":"2025-07-16T08:11:54.0293Z","updated_at":"2026-11-02T15:54:11.100633Z"}]}}