OpenJDK-1.8.0u31

[Armin K]

I see Oracle has new build, as well as Archlinux. I can't find the download URL's as I'm not familiar with their development model or their web site.

According to the Oracle release notes for their 8u31 version, this version disables SSLv3 which received several CVE entries.

​http://www.oracle.com/technetwork/java/javase/8u31-relnotes-2389094.html

[Pierre Labastie]

Download at: ​http://hg.openjdk.java.net/jdk8u/jdk8u/archive/jdk8u31-b13.tar.bz2

[Armin K]

I wonder if there's a nice way to get the latest tarball available so the currency script will work?

[bdubbs@…]

I'll work on the currency scripts today.

[Pierre Labastie]

Well, i am not sure there is a way to get the latest tarball, because the tarball is just an "hg" tag. Upstream updates and tags roughly every week or so, just incrementing the build number (the b13 above). At some point, they stop and they create a new branch (the u31 above), and start over increasing the "b" number. But they seem to have a very precise schedule for releases, see ​http://www.oracle.com/technetwork/topics/security/alerts-086861.html.

So I guess those dates could be entered into the currency script, and used as a heads up for the latest version. One of the following pages could be used too:

​http://www.oracle.com/technetwork/java/javase/8all-relnotes-2226344.html

​http://www.oracle.com/technetwork/java/javase/documentation/8u-relnotes-2225394.html

[Pierre Labastie]

fixed at r15395