http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html#AppendixJAVA
A commit references this bug: Author: feld Date: Tue Dec 15 22:06:13 UTC 2015 New revision: 403819 URL: https://svnweb.freebsd.org/changeset/ports/403819 Log: Document openjdk8 vulnerabilities PR: 204269 Security: CVE-2015-4908 Security: CVE-2015-4916 Security: CVE-2015-4906 Security: CVE-2015-4872 Security: CVE-2015-4911 Security: CVE-2015-4893 Security: CVE-2015-4803 Security: CVE-2015-4903 Security: CVE-2015-4734 Security: CVE-2015-4842 Security: CVE-2015-4882 Security: CVE-2015-4840 Security: CVE-2015-4902 Security: CVE-2015-4871 Security: CVE-2015-4806 Security: CVE-2015-4810 Security: CVE-2015-4868 Security: CVE-2015-4901 Security: CVE-2015-4844 Security: CVE-2015-4805 Security: CVE-2015-4860 Security: CVE-2015-4883 Security: CVE-2015-4843 Security: CVE-2015-4881 Security: CVE-2015-4835 Changes: head/security/vuxml/vuln.xml