full-disclosure

Open Source and information security mailing list archives

Date: Fri, 06 Mar 2015 18:29:55 -0800
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: paul.szabo@...ney.edu.au
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] Java 8u40 released: why?

On 03/ 6/15 06:21 PM, paul.szabo@...ney.edu.au wrote:
> Alan Coopersmith <alan.coopersmith@...cle.com> wrote (and he should
> know!):
>
>> Java 8u40 is a feature release that's been planned for almost a year,
>> not a special out of band bug fix release.
>> http://openjdk.java.net/projects/jdk8u/releases/8u40.html
>> https://blogs.oracle.com/thejavatutorials/entry/jdk_8u40_released
>
> My observation in the past was that Java updates came with the rest
> of the "quarterly CPU" cycle. Was that wrong, has something changed?

There are Java updates associated with security fixes on the quarterly
CPU cycle, but those aren't the only Java updates - it is software under
active development after all, and releases new features too, not just
security patches.

http://www.oracle.com/technetwork/java/javase/overview/jdk-version-number-scheme-1918258.html
https://www.java.com/en/download/faq/release_dates.xml
http://openjdk.java.net/projects/jdk8u/

-- 
	-Alan Coopersmith-              alan.coopersmith@...cle.com
	 Oracle Solaris Engineering - http://blogs.oracle.com/alanc

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives