Ongoing maintenance and support for OSCAR 19 has been suspended. Clinics and other organizations currently operating OSCAR 19 should begin planning for migration of their EMR to the nominated replacement, CARLOS EMR, or another suitable offering.
Organizations currently operating OSCAR 19 can expect a smooth and supported path to transition to CARLOS. Test migrations have already been successful and will be scripted for release in the near future.
A key advantage of the transition to CARLOS is that the unique features and functionality developed for OSCAR 19 have been ported to CARLOS. This means that clinics can retain important OSCAR 19 workflows, capabilities, and functionality while benefiting from the modernized architecture, security improvements, and ongoing development of CARLOS. The goal is to provide continuity for clinicians and staff rather than requiring organizations to abandon the features and workflows they rely on.
The underlying infrastructure required to operate OSCAR 19, including Ubuntu 22.04 or similar platforms, will no longer be supported through regular channels by Canonical as of April 2027.
There are numerous published vulnerabilities affecting dependencies used by OSCAR 19 that have been addressed in CARLOS including new CVEs discovered and published in 2026.
In addition to these published CVEs, OSCAR 19 has specific security vulnerabilities that have been identified but are not being publicly disclosed. The combination of known published vulnerabilities, additional undisclosed vulnerabilities, and the approaching end of regular infrastructure support presents an increasing security risk for organizations continuing to operate OSCAR 19.
Clinics are therefore strongly encouraged to migrate to a secure-by-design EMR, such as CARLOS, or to another actively supported EMR platform.
If migration is not viable, organizations should consult qualified cybersecurity and EMR security experts to assess their environment and implement appropriate measures to mitigate the risks associated with continued operation of OSCAR 19.
P Hutten-Czapski MD Aug 25, 2026