For Oracle Critical Patch Update Advisory

[Andrew Hughes]

----- Original Message -----
> For Oracle, a Critical Patch Update (CPU) is a collection of patches for
> multiple security vulnerabilities. And they will be released every three
> months. For OpenJDK, whether they will be updated accordingly. we want to
> update OpenJDK about security in time, so I need to your help that if you
> update OpenJDK for  Oracle CPU, please inform me. Thank you. Besides, I
> find that Oracle have update some security fixes in April 2016 (
> http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA
> <http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html#AppendixJAVA>).
> Whether you update OpenJDK accordingly? If you not , please do it. Thanks.
> 

The answer is always yes, unless stated otherwise.

OpenJDK 7 u101: http://mail.openjdk.java.net/pipermail/jdk7u-dev/2016-April/010544.html

It's always available earliest by using the IcedTea forests to check out
the appropriate OpenJDK 7 tag (e.g. jdk7u101-b00
http://icedtea.classpath.org/hg/release/icedtea7-forest-2.6/hotspot/rev/b9b4bc1e05e2)

$ hg clone -r jdk7u101-b00 http://icedtea.classpath.org/hg/release/icedtea7-forest-2.6 openjdk
$ cd openjdk
$ for repos in corba jaxp jaxws langtools jdk hotspot; do \
    hg clone -r jdk7u101-b00 http://icedtea.classpath.org/hg/release/icedtea7-forest-2.6/${repos}; \
  done
-- 
Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222