OpenJDK only gets 6 months of security patches. Try again.

twic · on Oct 10, 2018

I can understand you not being up to date on this, because the story has been too murky for too long, but that's not the case. See:

https://developers.redhat.com/blog/2018/09/24/the-future-of-...

tl;dr: Oracle will maintain the latest release of the OpenJDK codebase. The community (in practice, Red Hat) will backport security fixes from that to the current LTS codebase. AdoptOpenJDK and others will release builds of the current LTS codebase.

pjmlp · on Oct 10, 2018

https://adoptopenjdk.net/support.html

And if one is on Linux distribution like Red-Hat, or IBM/HP/Unisys platforms, cloud providers it is only a matter of calling update on the package manager.