OpenJDK - CPU Matrix

[Bernd Eckenfels]

Hello Eric, the fixed CVEs and other security fixes(!) are listed in the release announcements. Not sure if there is an aggregated view on them.

https://mail.openjdk.java.net/pipermail/jdk8u-dev/2019-April/009115.html

(BTW it should be same for the other releases)

As a personal recommendation I would always look up the associated Bugs or CVE numbers in the RedHat big tracker, in all cases I checked (in the past) it was way less secretive and more detailed (after the embargo) than the Oracle/OpenJDK JIRA. (Also Azul publishes a CVE Map for their releases, I am not sure if that document is public, I received it with subscriber access)

Gruss
Bernd
--
http://bernd.eckenfels.net

________________________________
Von: jdk8u-dev <jdk8u-dev-bounces at openjdk.java.net> im Auftrag von Eric Peterson <epeterson at interactivebrokers.com>
Gesendet: Montag, April 22, 2019 8:29 PM
An: jdk-updates-dev at openjdk.java.net; jdk8u-dev at openjdk.java.net
Betreff: OpenJDK - CPU Matrix

Hi all,

I'm wondering if there is an equivalent page for OpenJDK that tracks fixed vulnerabilities for the April release, similar to what Oracle posted for their recent CPU:

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixJAVA

I have hunted around a bit but not found anything so far.

--Eric