If you are willing to support yourself, you can use OpenJDK. If you want to rely on a third party vendor (paid or free like a linux/BSD distribution) to stay on

If you are willing to support yourself, you can use OpenJDK. If you want to rely on a third party vendor (paid or free like a linux/BSD distribution) to stay on top of bugs and release patched versions, they'll likely use OpenJDK. This isn't the slimy Oracle play. That will be when they stop releasing bug fixes in advance into OpenJDK, and do so without any back ports, backing information or tests (see: MySQL)