To our best knowledge this is incorrect (fake) news. Oracle has End-Of-Lifed Java 8 and as with previous major versions of Java, they offer an option to pay for ongoing Java 8 security updates if you are unable to migrate.
If you stick to Java 8 update released prior January 2019 or upgrade to Java 9 or above, you don’t need to pay anything. In case you decide to upgrade, Java 9 is officially supported with Clover 5.0 released in October 2018.
We found several sources from which this confusion seems to originate:
- https://www.azul.com/: selling commercial security updates to Java
- https://www.aspera.com/en/blog/oracle-will-charge-for-java-starting-in-2019/: selling license tracking and management systems
- https://www.infoworld.com/article/3284164/java/oracle-now-requires-a-subscription-to-use-java-se.html: media outlet article describing commercial additions to Java monitoring (Oracle Mission Control) and talking about paid Java 8 security updates
The only official information to the topic we were able to find is from Oracle Java SE Support Roadmap (http://www.oracle.com/technetwork/java/javase/eol-135779.html) where it is discussed in details in sections "End of Public Updates" and "Oracle Java SE Product Releases".
The key dates from the tables explain clearly that Oracle has notified the public about an incoming EoL of Java 8 in September 2017 with the last public Java 8 update coming in January 2019. After that, if you stubbornly stick to Java 8 on your servers and desktops you might choose to pay.