Java SE 5.0 Advanced and Java SE 5.0 Support (formerly known as Java SE for Business 5.0) Release Notes

• Documentation

Java SE 5.0 Advanced Revision Bug Fixes and Updates

The following tables summarize changes made in all Java SE Advanced 5.0 revisions. Bug fixes and any other changes are listed below in date order, most current revision first. Note that bug fixes in previous revisions are also included in the current revision.

To determine the version of your JDK software, use the following command:

java -version

Changes in 5.0u85

The full internal version number for this update release is 1.5.0_85-b11 (where "b" means "build"). The external version number is 5.0u85.

IANA Data 2015a

This release contains IANA time zone data version 2015a. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Area: tools/jar
Synopsis: Improve jar file handling

Starting with JDK 5.0u85 release, the jar tool no longer allows the leading slash "/" and ".." (dot-dot) path component in zip entry file name when creating new and/or extracting from zip and jar file. If needed, the new command line option "-P" should be used explicitly to preserve the dot-dot and/or absolute path component.

See 8064601 (not public).

Area: security-libs/javax.net.ssl
Synopsis: The EXPORT suites have been removed from the default enabled ciphersuite list.

The EXPORT strength ciphersuites (such as SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5) were recently shown as too weak to be practically used in secure communications. They are no longer enabled by default.

See 8074458 (not public).

The following table contains the list of other bugfixes included in this release:

Changes in 5.0u81

The full internal version number for this update release is 1.5.0_81-b12 (where "b" means "build"). The external version number is 5.0u81.

Highlights

This update release contains several enhancements and changes including the following:

• New Features and Changes

IANA Data 2014j

This release contains IANA time zone data version 2014j. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

New Features and Changes

SSLv3 is disabled by default

Starting with JDK 5.0u81 release, the SSLv3 protocol (Secure Socket Layer) has been deactivated and is not available by default. See the java.security.Security property jdk.tls.disabledAlgorithms in <JRE_HOME>/lib/security/java.security file.

If SSLv3 is absolutely required, the protocol can be reactivated by removing "SSLv3" from the jdk.tls.disabledAlgorithms property in the java.security file or by dynamically setting this Security property to "true" before JSSE is initialized.

It should be noted that SSLv3 is obsolete and should no longer be used.

Changes to Java Control Panel

Starting from JDK 5.0u81 release, SSLv3 protocol is removed from Java Control Panel Advanced options.

If the user needs to use SSLv3 for applications, re-enable it manually as follows:

• Enable SSLv3 protocol on JRE level: as described in the previous section.
• Enable SSLv3 protocol on deploy level: edit the deployment.properties file and add the following:
  
  deployment.security.SSLv3=true

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

The following table lists the bug fixes included in JDK 5.0u81 release:

The following are some of the notable bug fixes in this release:

Area: deploy
Synopsis: SSL 2.0 Compatible ClientHello protocol should not be included in the list of enabled protocols by default.

Previously, SSL 2.0 protocol was enabled by default. It is now disabled and the clients may need to enable it manually if needed.

See 8063028 (not public).

Area: security-libs/javax.net.ssl
Synopsis: client side SSLv2Hello is deactivated.

As part of disabling SSLv3, some servers have also disabled SSLv2Hello, which means communications with SSLv2Hello-active clients (e.g. JDK 1.5/6) will fail. SSLv2Hello is now disabled by default.

If the pre-5.0u81 SSLv2Hello behavior is required, set the java.lang.System property jdk.tls.client.enableSSLv2Hello to "true" before JSSE is initialized.

See 8061765 (not public).

Changes in 5.0u75

The full internal version number for this update release is 1.5.0_75-b07 (where "b" means "build"). The external version number is 5.0u75.

IANA Data 2014c

This release contains IANA time zone data version 2014c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Unsafe Server Certificate Change in SSL/TLS Renegotiations Not Allowed.

Starting with JDK 5.0u75, unsafe server certificate change in SSL/TLS renegotiations is not allowed by default. Server certificate change in an SSL/TLS renegotiation may be unsafe and should be restricted:

• if endpoint identification is not enabled in an SSL/TLS handshaking; and
• if the previous handshake is a session-resumption abbreviated initial handshake; and
• the identities represented by both certificates (in previous handshake and this handshake) cannot be regraded as the same.

If unsafe server certificate change is really required, please set the system property, jdk.tls.allowUnsafeServerCertChange, to "true" before JSSE is initialized. Note that this would re-establish the unsafe server certificate change issue.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

The following table lists the bug fixes included in JDK 5.0u75 release:

Area: security-libs/javax.net.ssl
Synopsis: Decrease the preference mode of RC4 in the enabled cipher suite list

This fix decreases the preference of RC4 based cipher suites in the default enabled cipher suite list of SunJSSE provider.

See JDK-8043832 (not public).

Changes in 5.0u71

The full internal version number for this update release is 1.5.0_71-b08 (where "b" means "build"). The external version number is 5.0u71.

IANA Data 2014c

This release contains IANA time zone data version 2014c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Disabling mmap Usage (on Solaris or Linux)

This release includes a new system property, sun.zip.disableMemoryMapping, which allows the user to disable the mmap usage in Sun's java.util.zip.Zipfile implementation (on Solaris and Linux platforms). Solaris or Linux applications that use /java.util.zip.ZipFile may experience a SIGBUS VM crash if the application accidentally overwrites any zip or jar files that are still being used by the same Java runtime. Although this is a programming error of the offending application, this system property provides a solution to avoid the VM crash. With the property set to true (-Dsun.zip.disableMemoryMapping=true, or simply -Dsun.zip.disableMemoryMapping) the Sun JDK/JRE runtime disables the mmap usage and the VM crash that might otherwise occur by overwriting the jar or zip file can be avoided.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Critical Patch Update Advisory.

The following table lists the bug fixes included in JDK 5.0u71 release:

Changes in 5.0u65

The full internal version number for this update release is 1.5.0_65-b10 (where "b" means "build"). The external version number is 5.0u65.

Olson Data 2013i

This release contains Olson time zone data version 2013i. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Critical Patch Update Advisory.

The following table lists the bug fixes included in JDK 5.0u65 release:

The following are some of the notable bug fixes in this release:

Area: other-libs/corba
Synopsis: Enhanced CORBA initializations

The system property org.omg.CORBA.ORBSingletonClass is used to configure the system-wide/singleton ORB. The handling of this system property has changed to require that the system wide/singleton ORB be visible to the system class loader. This is a change from previous releases where the singleton ORB was located using the thread context class loader of the first thread to call the no-argument ORB.init method. The implication of this change is that the system-wide/singleton ORB needs to be deployed on the class path or in the extension directory.

Applications that bundle their own ORB and only configure the property org.omg.CORBA.ORBClass should not be impacted by this change. The per-application ORB will be located via the thread context class loader of the thread calling the 2-argument ORB.init method as before.

See 8025005 (not public).

Area: xml/jaxp
Synopsis: Custom entities mapping files are no longer loaded with full permission

Legacy code may use the JDK internal API SerializerFactory to create a Serializer. In the process, a custom entity mapping file may be specified through the format parameter. The custom file was then loaded with full permission. As of this release, files that complies with java.util.ResourceBundle format, that is, with a ".properties" extension, will continue to be loaded with full permission. However, any other custom mapping files will require specific file access permission when the program is running with a SecurityManager.

The workaround to any issues caused by lack of permission to using an arbitrary file as the entity mapping file is, either changing the file to a resource bundle, or granting file read permission.

See 8029282 (not public).

Changes in 5.0u61

The full internal version number for this update release is 1.5.0_61-b11 (where "b" means "build"). The external version number is 5.0u61.

Olson Data 2013h

This release contains Olson time zone data version 2013h. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

The following table lists the bug fixes included in JDK 5u61 release:

Changes in 5.0u55

The full internal version number for this update release is 1.5.0_55-b10 (where "b" means "build"). The external version number is 5.0u55.

Olson Data 2013d

This release contains Olson time zone data version 2013d. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Changes in 5.0u51

The full internal version number for this update release is 1.5.0_51-b10 (where "b" means "build"). The external version number is 5.0u51.

Olson Data 2013b

This release contains Olson time zone data version 2013b. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Changes in 5.0u45

The full internal version number for this update release is 1.5.0_45-b05 (where "b" means "build"). The external version number is 5.0u45.

Olson Data 2012c

This release contains Olson time zone data version 2012c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Changes to RMI

From this release, the RMI property java.rmi.server.useCodebaseOnly is set to true by default. In previous releases the default value was false.

This change of default value may cause RMI-based applications to break unexpectedly. The typical symptom is a stack trace that contains a java.rmi.UnmarshalException containing a nested java.lang.ClassNotFoundException.

For more information, see RMI Enhancements.

Changes to Runtime.exec

On Windows platform, the decoding of command strings specified to Runtime.exec(String), Runtime.exec(String,String[]) and Runtime.exec(String,String[],File) methods, has been improved to follow the specification more closely. This may cause problems for applications that are using one or more of these methods with commands that contain spaces in the program name, or are invoking these methods with commands that are not quoted correctly.

For example, Runtime.getRuntime().exec("C:\\My Programs\\foo.exe bar") is an attempt to launch the program "C:\\My" with the arguments "Programs\\foo.exe" and "bar". This command is likely to fail with an exception to indicate "C:\My" cannot be found.

The example Runtime.getRuntime().exec("\"C:\\My Programs\\foo.exe\" bar") is an attempt to launch the program "\"C:\\My". This command will fail with an exception to indicate the program has an embedded quote.

Applications that need to launch programs with spaces in the program name should consider using the variants of Runtime.exec that allow the command and arguments to be specified in an array.

Alternatively, the preferred way to create operating systems processes since JDK 5.0 is using java.lang.ProcessBuilder. The ProcessBuilder class has a much more complete API for setting the environment, working directory and redirecting streams for the process.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Changes in 5.0u41

The full internal version number for this update release is 1.5.0_41-b01 (where "b" means "build"). The external version number is 5.0u41.

Olson Data 2012c

This release contains Olson time zone data version 2012c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Security Alert for CVE-2013-1493.

Changes in 5.0u40

The full internal version number for this update release is 1.5.0_40-b02 (where "b" means "build"). The external version number is 5.0u40.

Olson Data 2012c

This release contains Olson time zone data version 2012c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Changes in 5.0u39

The full internal version number for this update release is 1.5.0_39-b03 (where "b" means "build"). The external version number is 5.0u39.

Olson Data 2012c

This release contains Olson time zone data version 2012c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Changes in 5.0u38

The full internal version number for this update release is 1.5.0_38-b04 (where "b" means "build"). The external version number is 5.0u38.

Olson Data 2012c

This release contains Olson time zone data version 2012c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

The following table lists some of the notable bug fixes included in this release:

Changes in 5.0u36 b32

Bug Fixes

Changes in 5.0u36 b31

Please note that fixes from prior revision (5.0u35-b31) are included in this revision.

Bug Fixes

Changes in 5.0u36

The full version string for this update release is 1.5.0_36-b03 (where "b" means "build") and the version number is 5.0u36.

Olson Data 2012c

This release contains Olson time zone data version 2012c. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following Java Runtime Environment (JRE) security baselines:

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Area: hotspot/runtime_arguments
Synopsis: Improve VM configuration file loading.

This release contains changes to the default implicit loading of the .hotspot_compiler and .hotspotrc file. For existing deployments which rely on .hotspot_compiler (e.g. to exclude a method from hotspot compilation), an unsupported behavioral option has been provided to simulate the old loading behavior.

Command line options to support old behavior:

-XX:Flags=.hotspotrc
will revert to old behavior for .hotspotrc.

-XX:CompileCommandFile=.hotspot_compiler
for the .hotspot_compiler file.

Known Issues

Area: java/jar
Synopsis: Regression - jar command changes file permissions.

Due to a regression, the permissions of any jar file updated with the jar command are changed to read and write by user only. The workaround is to use the chmod command on the affected file to allow access by other and world.

This regression affects the Solaris and other Unix platforms. It does not affect the Windows platform.

See 7175845.

Changes in 5.0u35 b31

Bug Fixes

Changes in 5.0u35

The full internal version number for this update release is 1.5.0_35-b02 (where "b" means "build"). The external version number is 5.0u35.

Olson Data 2011l

This release contains Olson time zone data version 2011l. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Version Name Changed

The following changes were made to the output of the command java -version to releases starting from 5.0u35 and revision releases:

• The string "rev" was removed from the version name of the revision (for example, 1.5.0_35-b31).
• The text "for Business" was removed from the output of the command.

In addition, the string "fb" was removed from the bundle name (the file name of the installer).

Bug Fixes

Bug fixes are listed in the following table:

Changes in 5.0u34

The full internal version number for this update release is 1.5.0_34-b03 (where "b" means "build"). The external version number is 5.0u34.

Olson Data 2011l

Java SE 5.0u34 contains Olson time zone data version 2011l. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, see Oracle Java SE Critical Patch Update Advisory.

Changes in 5.0u33

The full internal version number for this update release is 1.5.0_33-b09 (where "b" means "build"). The external version number is 5.0u33.

Olson Data 2011l

This release contains Olson time zone data version 2011l. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

Bug fixes are listed in the following table:

Changes in 5.0u32

The full internal version number for this update release is 1.5.0_32-b05 (where "b" means "build"). The external version number is 5.0u32.

Olson Data 2011g

This release contains Olson time zone data version 2011g. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

RMI Registry Issue

A bug in the rmiregistry command included in this release may cause unintended exceptions to be thrown when an RMI server attempts to bind an exported object which includes codebase annotations using the "file:" URL scheme. The RMI servers most likely to be effected are those which are invoked only by RMI clients executing on the same host as the server.

RMI annotates codebase information as part of the serialized state of a remote object reference to assist RMI clients in loading the required classes and interfaces associated with the object at runtime. Exported objects which are looked up in the RMI registry and invoked by RMI clients running on hosts other than the server are usually annotated with codebase URL schemes, such as "http:" or "ftp:" and these should continue to work correctly.

As a workaround, RMI servers can set the java.rmi.server.codebase property to use codebase URLs other than the "file:" scheme for the objects they export.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, please see Oracle Java SE Critical Patch Update advisory.

Other Bug Fix

Changes in 5.0u31

The full internal version number for this update release is 1.5.0_31-b02 (where "b" means "build"). The external version number is 5.0u31.

Olson Data 2011g

This release contains Olson time zone data version 2011g. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

Bug fixes are listed in the following table:

Changes in 5.0u30-rev-b20

Olson Data 2011g

This release contains Olson time zone data version 2011g. For more information, refer to Timezone Data Versions in the JRE Software .

Bug Fixes

Bug fixes are listed in the following table:

Changes in 5.0u30

The full internal version number for this update release is 1.5.0_30-b03 (where "b" means "build"). The external version number is 5.0u30.

Olson Data 2011e

This release contains Olson time zone data version 2011e. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, please see Oracle Java SE Critical Patch Update advisory.

Other Bug Fix

Changes in 5.0u29

The full internal version number for this update release is 1.5.0_29-b02 (where "b" means "build"). The external version number is 5.0u29.

The Java for Business bundle version string does not contain the "for Business" text anymore. Starting from 5.0u29 it will be as follows:

java version "1.5.0_29"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_29-b02)
Java HotSpot(TM) Server VM (build 1.5.0_29-b02, mixed mode)

Olson Data 2011b

This release contains Olson time zone data version 2011b. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about security baselines, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Bug Fixes

Bug fixes are listed in the following table:

Changes in 5.0u28

The full internal version number for this update release is 1.5.0_28-b04 (where "b" means "build"). The external version number is 5.0u28.

OlsonData 2010o

This release contains Olson time zone data version 2010o. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, please see Oracle Java SE and Java for Business Critical Patch Update advisory.

Changes in 5.0u27

The full internal version number for this update release is 1.5.0_27-b02 (where "b" means "build"). The external version number is 5.0u27.

OlsonData 2010l

This release contains Olson time zone data version 2010l. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to

For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Root Certificates

No new root certificates added.

Bug Fixes

Changes in 5.0u26-rev-b06

Bug Fixes

Changes in 5.0u26-rev-b05

Bug Fixes

Changes in 5.0u26-rev-b04

Please note that fixes from prior revisions (5.0u25-rev) are included in this revision. 

Changes in 1.5.0_26

The full internal version number for this update release is 1.5.0_26-b03 (where "b" means "build"). The external version number is 5.0u26.

OlsonData 2010l

This release contains Olson time zone data version 2010l. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Root Certificates

Added new Entrust Root CA-G2 and updated Entrust.net CA (2048) root certificates. (Refer to 6959911.)

Transport Layer Security (TLS) Man-In-The-Middle Renegotiation Issue Resolved

For more information, please see the TLS Renegotiation Issue README.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, please see Oracle Java SE and Java for Business Critical Patch Update advisory.

Other Bug Fixes

Changes in 5.0u25-rev-b06

OlsonData 2010l

This release contains Olson time zone data version 2010l. For more information, refer to Timezone Data Versions in the JRE Software.

Bug Fixes

Changes in 5.0u25-rev-b05

Bug Fixes

Changes in 5.0u25-rev-b04

Bug Fixes

Changes in 1.5.0_25

The full internal version number for this update release is 1.5.0_25-b03 (where "b" means "build"). The external version number is 5.0u25.

OlsonData 2010i

This release contains Olson time zone data version 2010i. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) are available to Java for Business subscribers.

For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Root Certificates

There are no updates to Root Certificates in this release.

Bug Fixes

Bug fixes are listed in the following table:

Changes in 5.0u24-rev-b09

Bug Fixes

Changes in 5.0u24-rev-b08

OlsonData 2010i

This release contains Olson time zone data version 2010i. For more information, refer to Timezone Data Versions in the JRE Software.

Bug Fixes

Changes in 5.0u24-rev-b07

Bug Fixes

Changes in 5.0u24-rev-b06

Bug Fixes

Changes in 5.0u24-rev-b05

Bug Fixes

Changes in 5.0u24-rev-b04

Please note that fixes from prior revisions (5.0u23-rev) are included in this revision.

<

Bug Fixes

Changes in 1.5.0_24

The full internal version number for this update release is 1.5.0_24-b02 (where "b" means "build"). The external version number is 5.0u24.

OlsonData 2010b

This release contains Olson time zone data version 2010b. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

On October 30, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java for Business subscribers.

For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.

Root Certificates

Added seven new root certificates, removed three root certificates and five root certificates replaced with stronger signature algorithms from VeriSign, Thawte and GeoTrust. (Refer to 6904162.)

Ensuring Application and Applet Security when Mixing Signed and Unsigned Code

Signed Java Web Start applications and applets that contain signed and unsigned components could potentially be unsafe unless the mixed code was intended by the application vendor. As of this release, when mixed code is detected in a program, a warning dialog is raised. Mixing Signed and Unsigned Code explains this warning dialog and options that the user, system administrator, developer, and deployer have to manage it.

Interim Fix for the Transport Layer Security (TLS) Man-in-the-Middle Attack

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, please see Oracle Java SE and Java for Business Critical Patch Update advisory.

Other Bug Fixes

Changes in 5.0u23-rev-b05

Bug Fixes

Changes in 5.0u23-rev-b04

Bug Fixes

Changes in 5.0u23-rev-b02

IETF TLS protocol

This release contains an interim fix for a vulnerability in TLS.

Bug Fixes

Changes in 1.5.0_23

The full internal version number for this update release is 1.5.0_23-b01 (where "b" means "build"). The external version number is 5.0u23.

OlsonData 2009s

This release contains Olson time zone data version 2009s. For more information, refer to Timezone Data Versions in the JRE Software.

Security Baseline

This update release specifies the following security baseline:

In December, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) include the Access Only option and are available to Java for Business subscribers.

For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .

Root Certificates

There are no updates to Root Certificates in this release.

Bug Fixes

Bug fixes are listed in the following table.

Changes in 5.0u22-rev-b07

Bug Fixes

Changes in 5.0u22-rev-b06

Bug Fixes

Changes in 5.0u22-rev-b05

Bug Fixes

Changes in 5.0u22-rev-b04

Please note that fixes from prior revisions (5.0u21-rev) are included in this revision.

Changes in 5.0u22

For details, refer to the JDK 5.0u22 Update Release Notes which describe the release upon which this update is based.

Changes in 5.0u21-rev-b04

Bug Fixes

Changes in 5.0u21-rev-b03

Bug Fixes

Changes in 5.0u21-rev-b02

Bug Fixes

Changes in 5.0u21

For details, refer to the JDK 5.0u21 Update Release Notes which describe the release upon which this update is based.

Changes in 5.0u20-rev-b03

Please note that fixes from prior revisions (5.0u19-rev) are included in this revision.

Changes in 5.0u20

For details, refer to the JDK 5.0u20 Update Release Notes which describe the release upon which this update is based.

Changes in 5.0u19-rev-b05

Bug Fixes

Changes in 5.0u19-rev-b04

Bug Fixes

Changes in 5.0u19-rev-b03

Bug Fixes

Please note that fixes from prior revisions (5.0u18-rev) are included in this revision.

Changes in 5.0u19

For details, refer to theJDK 5.0u19 Update Release Notes which describe the release upon which this update is based.

Changes in 5.0u18-rev-b06

Bug Fixes

Changes in 5.0u18-rev-b05

Bug Fixes

Changes in 5.0u18-rev-b04

Bug Fixes

Changes in 5.0u18-rev-b03

Bug Fixes

Please note that fixes from prior revisions (5.0u17-rev) are included in this revision.

Changes in 5.0u18

For details, refer to the JDK 5.0u18 Update Release Notes which describe the release upon which this update is based.

Changes in 5.0u17-rev-b11

Bug Fixes

Changes in 5.0u17-rev-b10

OlsonData 2009a

This release contains Olson time zone data version 2009a. For more information, refer to Timezone Data Versions in the JRE Software.

Bug Fixes

Changes in 5.0u17-rev-b09

Bug Fixes

Please note that fixes from prior revisions (5.0u16-rev) are included in this revision.

Changes in 5.0u17

For details, refer to the JDK 5.0u17 Update Release Notes which describe the release upon which this update is based.

Changes in 5.0u16-rev-b12

CORBA Memory Leak Fix - Special Note 6725987

5.0u16-rev-b12 contains a fix for CR 6725987. When using updates and revisions prior to this revision, an ORB may contain valid references (that is, a memory leak) even after calling its shutdown() and destroy() methods, and it may respond to some method calls.

With this fix, the ORB correctly cleans up and the Garbage Collector can free up the memory held by such references. Incorrect accesses to such references or methods are likely to result in a NullPointerException to the application.

Bug Fixes

Changes in 5.0u16-rev-b11

Bug Fixes

Changes in 5.0u16-rev-b10

Bug Fixes

Changes in 5.0u16-rev-b09

Bug Fixes

Changes in 5.0u16-rev-b07

Bug Fixes

Changes in 5.0u16-rev-b06

Bug Fixes

Changes in 5.0u16-rev-b05

Bug Fixes

Changes in 5.0u16-rev-b03

Bug Fixes

Please note that fixes from prior revisions (5.0u15-rev) are included in this revision.

Changes in 5.0u16

For details, refer to the JDK 5.0u16 Update Release Notes which describe the release upon which this update is based.

Changes in 5.0u15-rev-b13

Bug Fixes

Changes in 5.0u15-rev-b12

Bug Fixes

Changes in 5.0u15-rev-b11

Bug Fixes

Changes in 5.0u15-rev-b10

Auto Update Off

Beginning with this revision, the JRE auto update feature defaults to OFF.

Auto Update behavior may be unpredictable if this revision is co-installed with any other Java SE implementation (Java for Business or Java SE) that does not have the auto update scheduler already turned off (AU-OFF). Results will also be unpredictable if this revision for Java for Business is installed and then subsequently a Java SE Update is installed with auto update turned on (the default for Java SE).

To workaround this problem, ensure that any other Java SE implementation residing on a system has auto update turned off prior to installing this revision or a subsequent revision. Or else, remove any other Java SE implementation before installing this or a subsequent revision.

Bug Fixes

Changes in 5.0u15-rev-b09

Bug Fixes