Hi Leo, On 04/25/2016 06:45 AM, leo yang wrote:
For Oracle, a Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities. And they will be released every three months. For OpenJDK, whether they will be updated accordingly. we want to update OpenJDK about security in time, so I need to your help that if you update OpenJDK for Oracle CPU, please inform me. Thank you. Besides, I find that Oracle have update some security fixes in April 2016 ( http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA <http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA>). Whether you update OpenJDK accordingly? If you not , please do it. Thanks.
I'll let others to comment on jdk7u repo update schedule and details. Just to note that these changes (April 2016 CPU - jdk 7 update 101) are already pushed to CentOS and you can access them there - https://git.centos.org/commit/rpms!java-1.7.0-openjdk/b2a4fc56eec03b28ccc2f79470b2c363c68f6da7
-- -Alex
