![]() If you want to ensure that your systems are as secure as possible, it is crucial to deploy the CPU as quickly as possible (assuming it contains fixes for security vulnerabilities with high CVSS scores). What does this mean for deploying updates for your Java applications? ![]() What is the release cadence of CPUs and PSUs?ĬPU releases are scheduled for release on the Tuesday closest to the 17th day of January, April, July, and October under the normal Oracle Critical Patch Update schedule. This explains why there was JDK 8u201 (CPU) and JDK 8u202 (PSU). The CPU has an odd number, and the PSU is even. On foojay, the quarterly non-critical fixes are visualized and analyzed: Java SE Patch Set Updates (PSU) contain all of the fixes in the corresponding CPU, as well as additional non-critical fixes. On foojay, fixes to security vulnerabilities and critical bug fixes are visualized and analyzed:Ī PSU is a Patch Set Update and is a superset of the CPU. Java SE Critical Patch Updates (CPU) contain fixes to security vulnerabilities and critical bug fixes. CPUĪ CPU is a Critical Patch Update, and the key term here is "critical". Both of these are terms used specifically by Oracle and are used across their whole product range, not just for Java. To make things more complicated, we have to deal with two three-letter acronyms for the updates: CPU and PSU. How these changes get into older versions requires other members of the OpenJDK community to do the work of backporting. However, Oracle only upstreams the source code for each update’s security patches and bug fixes into the current OpenJDK project repository. There are now a number of providers of OpenJDK binaries. This was thanks to an overlap to ease migration to the latest version. These have always been for the current release and often for the previous release as well. ![]() OverviewĪlmost all Java users have been used to regular public updates being made available for the JDK, by Oracle, free of charge. Non-commercial users, for example, those people running Java on their PCs at home to play Minecraft, continue to get Oracle JDK 8 updates through the Java Control Panel functionality until the end of 2020. In January 2019, the last public updates (for commercial users) of both Oracle JDK 8 and the Oracle OpenJDK JDK 11 were released. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |