Oracle has decided to implement their licensing restrictions on all their Java packages and it is now hiding Oracle Java JRE/JDK downloads behind their customer login page. As a result, Flexera is no longer able to provide Out-of-the-box pre-configured Oracle Java JRE and Oracle Java JDK packages.
SVM will continue to provide vulnerability assessment for Oracle Java versions, but Flexera cannot offer pre-configured and pretested in QA Java JRE/JDK patches due to a few different reasons. Java patches appear in grey color after the user has changed the "View" to show packages that don't have a silent parameter. These patches will only appear after the view has filtered to deselect the setting "Display only products for which silent update packages can be created automatically".
Once you see the grey Oracle Java JRE entry, you can use the "Create Update Package" option as usual to launch the package creation. You will be required to insert the correct Oracle installer along with the correct Silent Parameter in the package script inside the brackets of the "var silentParams" variable.
The packages will contain a default URL pointing to the vendor page instead. This link must always be removed and the "Add Local File" option could be used to insert the downloaded installer instead.
NOTE: Due to limitations to provide this package as "Automatic Update", Flexera cannot perform testing of the package in QA. We cannot provide additional configuration options for the Java deployment either. The SVM support team may not be able to assist with troubleshooting failing custom Oracle Java patches since the patch is no longer supported as "Automatic Update". Support recommends to customers to ensure full proper testing of Oracle Java JRE/JDK before deploying them to production.
on - edited on by
RDanailov
