For Oracle, a Critical Patch Update (CPU) is a collection of patches for
multiple security vulnerabilities. And they will be released every three
months. For OpenJDK, whether they will be updated accordingly. we want to
update OpenJDK about security in time, so I need to your help that if you
update OpenJDK for Oracle CPU, please inform me. Thank you. Besides, I
find that Oracle have update some security fixes in April 2016 (
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA
<http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA>).
Whether you update OpenJDK accordingly? If you not , please do it. Thanks.
