Our current jdk8 backport packages do not have current security updates & fixes applied. They were created for Titan testing, and have not since been touched.
We are now considering to use jdk8 for Cassandra in general, but before we can do so we'll need an up-to-date jdk8 package. The next version of Cassandra will depend on jdk8, and the general recommendation is to run current versions with it as well.