Differences between openJDK and oracleJDK

Mario Torre neugens.limasoftware at gmail.com
Mon Sep 19 18:29:06 UTC 2016

2016-09-19 17:04 GMT+02:00 Steffen Heil (Mailinglisten) <lists at steffen-heil.de>:

> - Can I be sure that security fixes in oracleJDK make it into openJDK in time?

There's a lot that goes on regarding the security fixes that can't be
discussed on a public mailing list. Anyway, OpenJDK doesn't have
binary releases, so the real question here is if you get a binary
OpenJDK update with the latest security patches or not, and this
depends on a lot of factors. If you are working on Linux, generally is
a responsibility of the Linux distribution you choose.

Most of the release process for Linux distributions happens through
the IcedTea channel, but whether or not a specific distribution
chooses to do a release right away, or waits it's something that you
need to check with your OS of choice. For Red Hat and Fedora, for
example, the release process usually happens minutes after the
security errata is public.

I hope this helps.

pgp key: http://subkeys.pgp.net/ PGP Key ID: 80F240CF
Fingerprint: BA39 9666 94EC 8B73 27FA  FC7C 4086 63E3 80F2 40CF

Java Champion - Blog: http://neugens.wordpress.com - Twitter: @neugens
Proud GNU Classpath developer: http://www.classpath.org/
OpenJDK: http://openjdk.java.net/projects/caciocavallo/

Please, support open standards:

More information about the discuss mailing list