Oracle’s Java 11 trap

Re:Oracle’s Java 11 trap by raquo on Wednesday September 26, 2018 @01:42PM (#18078390)

The difference is that OpenJDK N will stop receiving security fixes the moment OpenJDK (N+1) is released. LTS releases are only LTS for Oracle JDK.

So no, OpenJDK by itself is not suitable for production use. To put a Java app in production securely you now need to either pay Oracle or find someone to provide security fixes to OpenJDK beyond what Oracle provides for free.

[ Parent | on HN ]

Re:Oracle’s Java 11 trap by jodastephen on Wednesday September 26, 2018 @01:58PM (#18078566)

Security patches will be available for Java 11 via Red Hat, IBM and others (who have promised to do so). And the binaries will be built and made available here https://adoptopenjdk.net/ as well as via other OpenJDK build farms (eg. Azul Zulu).

[ Parent | on HN ]

Re:Oracle’s Java 11 trap by riku_iki on Wednesday September 26, 2018 @03:19PM (#18079332)

Is there any path for security updates/LTS for deb based linux distros?..

[ Parent | on HN ]

Re:Oracle’s Java 11 trap by netikras on Thursday September 27, 2018 @02:21AM (#18082431)

Pardon me but AFAIK all JDKs are backwards-compatible. Unless you're doing some weird sh*t which exploits JRE bugs (oh, sorry.. features). But that just makes you a bad dev as you tie yourself to the implementation rather than specification. The _unsafe_ part being removed is not bckw_compat, I give you that. But if you're tied to this hole you're doomed to become legacy code maintainer as it's not coming back.

Just upgrade to OpenJDK_v(N+1) whenever it's out. Get rid of Karaf, Liferay or whatever is holding you back. Don't become a legacy app developer.

[ Parent | on HN ]