For Oracle Critical Patch Update Advisory

[Alex Kashchenko]

Hi Leo,

On 04/25/2016 06:45 AM, leo yang wrote:
> For Oracle, a Critical Patch Update (CPU) is a collection of patches for
> multiple security vulnerabilities. And they will be released every three
> months. For OpenJDK, whether they will be updated accordingly. we want to
> update OpenJDK about security in time, so I need to your help that if you
> update OpenJDK for  Oracle CPU, please inform me. Thank you. Besides, I
> find that Oracle have update some security fixes in April 2016 (
> http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA
> <http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA>).
> Whether you update OpenJDK accordingly? If you not , please do it. Thanks.

I'll let others to comment on jdk7u repo update schedule and details. 
Just to note that these changes (April 2016 CPU - jdk 7 update 101) are 
already pushed to CentOS and you can access them there - 
https://git.centos.org/commit/rpms!java-1.7.0-openjdk/b2a4fc56eec03b28ccc2f79470b2c363c68f6da7

-- 
-Alex