----- Original Message ----- > For Oracle, a Critical Patch Update (CPU) is a collection of patches for > multiple security vulnerabilities. And they will be released every three > months. For OpenJDK, whether they will be updated accordingly. we want to > update OpenJDK about security in time, so I need to your help that if you > update OpenJDK for Oracle CPU, please inform me. Thank you. Besides, I > find that Oracle have update some security fixes in April 2016 ( > http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA > <http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA>). > Whether you update OpenJDK accordingly? If you not , please do it. Thanks. >
The answer is always yes, unless stated otherwise. OpenJDK 7 u101: http://mail.openjdk.java.net/pipermail/jdk7u-dev/2016-April/010544.html It's always available earliest by using the IcedTea forests to check out the appropriate OpenJDK 7 tag (e.g. jdk7u101-b00 http://icedtea.classpath.org/hg/release/icedtea7-forest-2.6/hotspot/rev/b9b4bc1e05e2) $ hg clone -r jdk7u101-b00 http://icedtea.classpath.org/hg/release/icedtea7-forest-2.6 openjdk $ cd openjdk $ for repos in corba jaxp jaxws langtools jdk hotspot; do \ hg clone -r jdk7u101-b00 http://icedtea.classpath.org/hg/release/icedtea7-forest-2.6/${repos}; \ done -- Andrew :) Senior Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) PGP Key: ed25519/35964222 (hkp://keys.gnupg.net) Fingerprint = 5132 579D D154 0ED2 3E04 C5A0 CFDA 0F9B 3596 4222
