Does SAP Have an Extended Support contract with Oracle for JDK6 for SAPJVM 6.1?

[former_member250295]

I have been asked by our security management team to confirm whether or not SAP has an active Extended Support contract with Oracle to continue to provide vulnerability remediation for newly discovered JDK/JRE6 vulnerabilities.  Since SAPJVM 6.1 is a modified Oracle Java 6 stack, and BI 4.1 currently uses SAPJVM 6.1 (any plans to move to 7.1?  but since Oracle Java 7 is no longer receiving public updates, the same issue applies!!!) one could infer that at least some of the vulnerabilities discovered in Java 6 apply to SAPJVM 6.1.

If this is not the correct forum for this question, any guidance would be appreciated.

Thank you!

[denis_konovalov · Accepted solution]

this might be the better place for the question :

From BI/BOBJ side - all known and related java vulnerabilities are reported to SAP Java developers and fixes are applied via SP's to BI Platform.

[CdnConnection]

Garrick,

    It all depends on what SP you are running for BI 4.1, the Java does get updated.   SP06 is slated to come out any time, that when Java should updated to 1.8.xx

Regards,

Ajay