Java Update Remediation No Longer Supported in GFI LanGuard

Overview

Oracle has revised its distribution policy for Java, requiring all downloads of JRE and JDK updates to be authenticated via an Oracle Technology Network (OTN) account. This policy change prevents GFI LanGuard from accessing the necessary patch files for automated remediation of Java-related updates. While LanGuard will continue to detect and report missing Java updates, it will no longer be capable of applying them automatically. This limitation impacts all Java, JRE, and JDK update remediations performed through LanGuard.

Solution

To adapt to Oracle's new authentication policy, the following updates apply to LanGuard:

• Remediation Disabled:

  • Automated remediation of Java-related updates is no longer supported, as Oracle's new download restrictions prevent access to the required update files without an OTN-authenticated session.

  • Any attempt to remediate Java updates through LanGuard will fail, which is expected behavior.

• Detection Still Supported:

  • LanGuard will continue to detect and report missing Java, JRE, and JDK updates.

  • This ensures that administrators maintain visibility into out-of-date Java installations requiring manual updates.

• Manual Update Required:

  • Administrators must now download and apply Java updates manually from the Oracle Java SE Downloads page using an OTN account.

  • Ensure that updates are downloaded and installed directly on the relevant endpoints.

• Planned Changes in UI:

  • Until a product update is released, LanGuard will still present the option to remediate Java-related updates. However, remediation will not work and should not be attempted.

  • A future update will remove the remediation option entirely for these updates to eliminate confusion.

Note that the "Deploy Custom Software" option in the Remediation tab remains a viable workaround to push out the patch to multiple machines but requires a batch file with the silent installation configuration.