Oracle has issued emergency Java updates that remove root certificates associated with a certificate authority key compromise, requiring development teams to check the runtimes their applications use.