Oracle JDK 21's Free Updates Ended: What Java Teams Must Do Before Oct 20

By -

There is a date sitting eight days in front of you, and most Java teams have not put it in their calendar. On October 20, 2026, Oracle ships its quarterly Critical Patch Update. For JDK 21, that release is the first one published under the Java SE OTN license — the paid terms that already cover Java 8, 11, and 17. If you run Oracle's own JDK 21 binaries in production, this post is your checklist.

What actually changed

Oracle JDK 21 shipped in September 2023 under the No-Fee Terms and Conditions (NFTC) license, which permits free use — even commercial and production use. Oracle's stated policy: the current LTS stays under NFTC, and the previous LTS transitions to the OTN license one year after the next LTS release. JDK 25 arrived in September 2025, so JDK 21's free window ran through September 2026. Oracle's own licensing FAQ says updates after that are planned under the Java SE OTN license, the same paid terms governing Java 8, 11, and 17 today.

Two clarifications that matter:

  1. Builds you already installed do not suddenly become unlicensed. The practical issue is new security patches: from the October 2026 CPU onward, Oracle JDK 21 patches ship with a paid subscription attached for commercial production use.
  2. The exact cutoff is read slightly differently by different sources. Azul's read is that the last free JDK 21 update shipped in July 2026; others, citing Oracle, say updates through the September 2026 release stay under NFTC and October is the first OTN one. Check Oracle's current licensing FAQ for your own case — and don't treat this post as legal advice.

The silent trap: floating base images

The license change does not arrive as an email or a popup. It arrives as a build number. If your Dockerfiles, base images, or package managers pull an unpinned oracle-jdk:21 from a URL that never changes, the patch job that runs on October 21 will silently install an OTN-licensed binary into production:

# Floating tag — silently becomes OTN-licensed on Oct 20
FROM oracle-jdk:21

# Pinned — stays under NFTC terms, but gets no new security patches
FROM oracle-jdk:21.0.12

Oracle's Java SE Subscription is priced per employee, so one OTN-licensed binary running in production is enough to put your organization in licensing scope. The fix is an audit before October 20, not a panic after.

First, find out what JDK you're actually running

On every machine, CI agent, and container base image, run:

java -version

Look at the vendor line. Eclipse Adoptium / Temurin, Amazon Corretto, or Azul Zulu mean you are on a free OpenJDK distribution and this whole post is informational only. If the vendor says Oracle Corporation and the version is 21, you are in scope.

Your four options

1. Pay for a Java SE Subscription. Straightforward if you want Oracle's binaries with security patches and support. Expensive at scale — price it before October 20 rather than discovering the invoice later.

2. Upgrade to JDK 25. The current LTS is under NFTC through September 2028. If your code already runs cleanly on 21, the jump to 25 is a real option — but test first; "it's just an LTS" is not a migration plan.

3. Switch to a free OpenJDK distribution. Temurin, Corretto, Zulu, and others ship free JDK 21 builds with their own patch cadence. For most teams this is the lowest-friction exit: same Java, different vendor, no subscription. Verify your vendor's update policy before committing.

4. Pin at 21.0.12 and stay. Permissible — your existing installs remain licensed as they are. But you will not receive new security patches for Oracle's JDK 21, and the gap compounds every quarter. This is a deliberate risk decision, not a default.

The checklist for this week

  1. Audit every place a JDK enters your estate: Dockerfile base images, CI agents, developer laptops, package-manager installs.
  2. Run java -version on each and note the vendor.
  3. Pin any floating Oracle JDK 21 references — decide the long-term option separately, but stop the silent upgrade now.
  4. Confirm the decision with your licensing or legal team before October 20.

Bottom line: nothing you have installed breaks on October 20. What breaks is the assumption that the next patch is free. Eight days is enough time to audit and pin — it is not enough time to discover this from an invoice.

Comments

Post a Comment

Popular posts from this blog

What are the core classes and interfaces of hibernate 4

By -
Hibernate is an Open source Object Relational Mapping framework. It enables developer to develop classes to be persist in an object oriented way including inheritance and the Java collections framework. Current hibernate stable release is 4.3.5 that was released in April 2014. It has various classes and interfaces, but sometimes interviewer ask you to list down the core classes and interfaces of hibernate. Well hibernate has various classes and interfaces, but when we say core classes and interfaces those are listed below, they all are the exceptional role in hibernate library. Configuration (class) ServiceRegistry (interface) SessionFactory (interface) Session (interface) Transaction (interface) Query (interface) Configuration: Is a class resides inside the org.hibernate.cfg package. Configuration as it's name implies it is all about the configuration of the application, configuration of the application done only at the initialization time which is only once for t...
Read more

JSP Servlet Interview Questions For Freshers Series 1

By -
Image
We know that while preparing for an interview there are lots of things needs to keep in your mind, and for freshers not easy to cover all the questions of Core Java, Servlet, JSP, Database, Aptitude, Algorithm etc. So we have planned to design few very popular interview question askeds in an interview for freshers on different series based on there priority and of course priority start from series 1. In our previous post we have listed very popular 20 Core Java basic interview questions for freshers . Friends don't worry we will post maximum number of interview questions on JSP Servlet but, started from very popular and most respective questions. JSP Servlet Interview Questions For Freshers Series 1 1. What is the life cycle of Servlet? Yes, this is very popular interview question and interviewer expect from you to at least list down the process involved while serving request for a Servlet. Well, Servlet life cycle is managed by Servlet Container and javax.servlet.Servlet in...
Read more

Java Banking Finance Services and Insurance (BFSI) domain interview questions

By -
Image
Banking, Financial Services and Insurance ( BFSI ) is a banking domain, nowadays in IT industry high pay, stability and most respected domain after R&D, which includes verity of products and services such as commercial banks, insurance companies, non-banking financial companies, cooperatives, pensions funds, mutual funds etc. In BFSI domain mostly questions are comes from the Class loader, Thread, Concurrency api, Array, Collection, JVM architecture, Java Memory Model, String pool, String, StringBuilder, StringBuffer, and Puzzle. Normally interviewer will ask you to rate yourself in the above given API's, it is again depends on interviewer state of mind. Interviewer: Ok lets start with Collection, What is the different between ArrayList and LinkedList ? The demand of this question is to just make you comfort while in a interview ground. Smart Candidate :) ArrayList and LinkedList both are implementation of List interface. ArrayList implementation is based on dyna...
Read more