I can confirm that this recent security update: https://tracker.debian.org/news/1054999/accepted-openjdk-7-7u231-2619-1deb8u1-source-amd64-all-into-oldoldstable/
breaks our application (Shibboleth IdP) with: java.lang.NoClassDefFoundError: sun/security/ec/ECParameters I'm not sure if this regression is a mandatory side-effect of the security fixes. Regards