Oracle Java SE Critical Patch Update

For diagnostic purposes please provide the output that you receive for the commands

uname -a
lsb_release -crid
dpkg -l | grep openjdk
apt-cache policy openjdk-8-jre

Hello Manfred,

Please find the below details:

1. 4.4.0-1117-aws #131-Ubuntu SMP Tue Oct 6 20:45:33 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

2.

Distributor ID: Ubuntu
Description: Ubuntu 16.04.6 LTS
Release: 16.04
Codename: xenial

3.

ii openjdk-8-jdk:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Development Kit (JDK)
ii openjdk-8-jdk-headless:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Development Kit (JDK) (headless)
ii openjdk-8-jre:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Java runtime, using Hotspot JIT
ii openjdk-8-jre-headless:amd64 8u275-b01-0ubuntu1~16.04 amd64 OpenJDK Java runtime, using Hotspot JIT (headless)

4.

openjdk-8-jre:
  Installed: 8u275-b01-0ubuntu1~16.04
  Candidate: 8u275-b01-0ubuntu1~16.04
  Version table:
 *** 8u275-b01-0ubuntu1~16.04 500
        500 http://us-east-2.ec2.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages
        100 /var/lib/dpkg/status
     8u77-b03-3ubuntu3 500
        500 http://us-east-2.ec2.archive.ubuntu.com/ubuntu xenial/main amd64 Packages

The Ubuntu package management tells that you have already version 8u275 installed which is supposed to already contain the required updates. In your initial question, however, version 8u161 is shown. This is somewhat contradictory.

What output do you receive for the commands

which java
ls -l `which java`
java -version

lrwxrwxrwx 1 root root 22 Mar 27 2018 /usr/bin/java -> /etc/alternatives/java

java version "1.8.0_161"
Java(TM) SE Runtime Environment (build 1.8.0_161-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.161-b12, mixed mode)

How did you install Oracle Java? What steps did you take?

Apparently you have two different installations of openjdk on your system - the current one from the Ubuntu repositories, but also another outdated one from a different source. Unfortunately the one that is used is the obsolete one.

What is the output of

ls -l /etc/alternatives/java
update-alternatives --list java

It is like the other person installed the java.I did not install it.But I would like to install the security patches.So if it is like all the security patches are installed here ?

@Manfred,

Below is he output:

ls -l /etc/alternatives/java
lrwxrwxrwx 1 root root 39 Mar 27 2018 /etc/alternatives/java -> /usr/lib/jvm/java-8-oracle/jre/bin/java

update-alternatives --list java
/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java
/usr/lib/jvm/java-8-oracle/jre/bin/java

Ok, that is the proof of my assumption.

What is the output of the commands

/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java -version
/usr/lib/jvm/java-8-oracle/jre/bin/java -version

Apparently you have an installation of oracle java 8u161 and an installation of openjdk 8u275.

You have to decide what you need and want. You can e.g.

uninstall oracle java and use the updated (and already patched) openjdk version
or
continue using oracle java, but if doing so, you should update the oracle java installation first

@ Manfred,

Below is the output:

/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java -version

openjdk version "1.8.0_275"
OpenJDK Runtime Environment (build 1.8.0_275-8u275-b01-0ubuntu1~16.04-b01)
OpenJDK 64-Bit Server VM (build 25.275-b01, mixed mode)

/usr/lib/jvm/java-8-oracle/jre/bin/java -version

java version "1.8.0_161"
Java(TM) SE Runtime Environment (build 1.8.0_161-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.161-b12, mixed mode)

Below are my questions:

1. If I want to keep both of them and with latest security patches then please let me know the commands to keep them updated.

2. If I want to uninstall java version "1.8.0_161" then please get me the commands

The steps required for oracle java depend on the way how that software was installed. I do not know any details of how this was done on your system, and so I cannot help.

The easiest temporary solution probably is the following:

Issue the command

sudo update-alternatives --configure java

and when asked for it type the number of the openjdk installation. This should instruct your system to use the openjdk version when you issue the "java" command.

Test with

java -version

afterwards.