NOTICE: Oracle Java users need to switch to a supported version
Thursday, May 23, 2019
This information was sent via email to the IT Security Community, Frontline Notify (FLN), and unix-admins on May 23, 2019.
Summary
Oracle now requires a paid subscription to Java SE for commercial users to receive important updates and security patches. If you are responsible for a university instance of Java, it is critical that you use an up-to-date version and keep it updated with security patches as they are released. Oracle Java users need to either purchase a subscription (available in the ITS Software Store) or switch to other comparable software and keep it updated. For details, see ITS: Oracle Java SE Subscriptions.
Problem
Oracle has changed its pricing model for Java, and subscriptions are required for support and updates, including security patches. Other support contracts have been discontinued. If you use Oracle Java and have not yet purchased a subscription, please do so as soon as possible or switch to alternate supported software.
Threats
Unsupported software is at risk over time as new bugs and vulnerabilities are identified and exploited.
Affected Versions
All versions of Oracle Java Standard Edition (SE).
Action Items
- Only use supported software that receives regular security updates as needed. Options include:
- Purchase Oracle Java SE subscriptions through the ITS Software Store (U-M login required):
- Or use alternate supported software that receives security updates as needed. See ITS: Oracle Java SE Subscriptions for some suggested options.
- Remove unsupported versions of Oracle Java.
MiWorkspace staff members are working with unit representatives to identify unit-specific applications that require Java and deploy the appropriate solution. No action is required by individual MiWorkspace customers or users.
ITS staff members are working now to take appropriate action on use of Java for other ITS-provided services as needed.
Questions, Concerns, Reports
You can contact the ITS Service Center to reach ITS Software Services for help using the ITS Software Store.
References
- Oracle Java SE Subscriptions (Information and Technology Services)
- Oracle Java new licensing model (The ITAM Review, 02/21/19)
- Using Java? Here's How Oracle's New 2019 Java SE Licensing Affects You (Upper Edge Blog, 12/20/19)
- Oracle now requires a subscription to use Java SE (InfoWorld, 06/22/18)