Oracle JDK8 End of life and continued use without update

Ed Munoz Ed.Munoz at
Thu Jan 24 19:15:07 UTC 2019

I agree with what Andrew H. says below - you should move to OpenJDK 8.x to have continued access to security updates and other fixes.

If you choose to proceed without security updates (a risky strategy), you will find useful information in this Oracle FAQ blog post: 

One of the questions answered in this Oracle FAQ is: 
" Q5: Can an update of Java 8, released before April 2019, and downloaded under the BCL, continue to be used after January 2019?"


Date: Thu, 24 Jan 2019 11:09:28 +0900
From: "Md. Sarowar Alam" <sarowar.cse at>
To: jdk8u-dev <jdk8u-dev at>
Subject: Re: Oracle JDK8 End of life and continued use without update
Thanks for your kind reply.

Yes I'm aware that sooner or later we have to move to OpenJDK.
But we have some dependency on com.sun.* in some old libraries and it's kind of hard to change/upgrade those right now. So can't move to OpenJDK because of these. :( It's better for us if we can continue using OracleJDK8 without updates/support (i.e. without buying subscription) while we adapt to OpenJDK step by step.
Best Regards,
*Md. Sarowar Alam*
On Thu, Jan 24, 2019 at 2:47 AM Andrew Hughes <gnu.andrew at> wrote:

> On Wed, 23 Jan 2019 at 03:26, Md. Sarowar Alam <sarowar.cse at>
> wrote:
> >
> > Hi
> > My apologies if this is not the correct mailing list.
> >
> > I'am(me or my company) using Oracle JDK8 for some web services.
> > As public support for JDK8 is ending on January, 2019, is it 
> > possible continue using Oracle JDK8 without further update for 
> > commercial
> purposes?
> > Or does a user need to subscribe to new model even though that user
> doesn't
> > want to update?
> > ----------------
> > Best Regards,
> > *Md. Sarowar Alam*
> I would suggest switching to OpenJDK 8 builds to continue receiving 
> security updates. Builds may be included as part of your operating 
> system (e.g. on most GNU/Linux distributions) or you can look at 
> downloading a build from a provider such as AdoptOpenJDK (
> Hope that helps,
> --
> Andrew :)
> Senior Free Java Software Engineer
> Red Hat, Inc. (
> Web Site:
> Twitter:
> PGP Key: ed25519/0xCFDA0F9B35964222 (hkp:// Fingerprint 
> = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

More information about the jdk8u-dev mailing list