Bump openjdk8 to 8u131 to fix multiple CVEs
According to Oracle this version bump fixes the following CVEs: CVE-2017-3512, CVE-2017-3514, CVE-2017-3511, CVE-2017-3526, CVE-2017-3509, CVE-2017-3533, CVE-2017-3544, and CVE-2017-3539 (Oracle security page).
See also release notes for other fixes and improvements.
It would be great if this could get in the repository before the 3.6 release.
(from redmine: issue id 7281, created on 2017-05-16, closed on 2017-05-25)