RE: Has IBM announced any reaction to Oracle's announced end of public updates for JDK 8 -- MIDRANGE-L

IBM i Slated to Support Java 11
https://www.itjungle.com/2018/07/25/ibm-i-slated-to-support-java-11/

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Steinmetz, Paul
Sent: Tuesday, July 24, 2018 9:45 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: Has IBM announced any reaction to Oracle's announced end of public updates for JDK 8

Another piece of this puzzle.
Oracle was only referring to the Java SE in the announcement.
There is Java SDK, JRE, JVM, Java SE Runtime, and J2SE.
Most of our Java deployments are SDK or JRE.
Our IT folks conclusion is this announcement will have little or no impact.

https://www.quora.com/What-is-the-difference-between-Java-SDK-JRE-JVM-Java-SE-Runtime-and-J2SE

Paul

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Roberto José Etcheverry Romero
Sent: Tuesday, July 24, 2018 8:07 AM
To: Midrange Systems Technical Discussion
Subject: Re: Has IBM announced any reaction to Oracle's announced end of public updates for JDK 8

Rob
I think the point is that non-ibm-i-based programs like ACS currently
depend on Oracle's Java by default. IBM should start shipping ACS with the
IBM JRE to simply the end-user's life. It's been said that we can just
place a JRE on the same folder and ACS will happily use it but, in the five
minutes I devoted to it, I haven't been able to find a quick way to
download and install the IBM JRE...
Best Regards,
Roberto

On Sun, Jul 22, 2018 at 11:50 PM, Rob Berendt <rob@xxxxxxxxx> wrote:

A couple of my thoughts.

1 - Two years will FLY by. We're halfway through 2018 already. Vendors
need to plan NOW! They have huge development cycles and often look at
maintenance money as a cash cow and feel it's stupid to waste that on
product development. Also consider this statement:
"Oracle will continue to provide Public Updates and auto updates of Java
SE 8, until at least the end of December 2020 for Personal Users, and
January 2019 for Commercial Users."
January 2019 is rapidly approaching.
However compare the table "Java SE Public updates" with the table "Oracle
Java SE support roadmap" and you see the "premier" support going out
several more years. Perhaps Java on IBM i falls under this?
But basically Java on IBM i looks to be at least two releases behind.

2 - It matters not one whit, not one teeny tiny bit, that IBM will address
some CVE security concern with JDK 8 with a PTF when it comes to audit
time. All the security scan has to say is that you are running an
outdated form of JVM and you fail the audit. Some might argue that the
security scan should see if the individual CVE is addressed but when you
consider the effort to test a CVE on a periodic scan may involve some
serious CPU crunching and be detrimental to performance you can see why
they don't do this. And do you really want them testing a CVE which says
"if you do this, that and the other thing you can expect to see smoke
rising out of the back of your system, Interpol at your door and perhaps
even some serious consequences"?

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD