Java SE 7 Update Release Notes

On the Linux platform, the names of JRE and JDK packages provided by Java RPM installers have been changed. The names of JRE and JDK packages now follow jre and jdk patterns respectively, instead of jre and jdk previously used. For example, the new names of JRE and JDK packages are jre1.7 and jdk1.7 respectively. If the system property jceks.key.serialFilter is also supplied, it supersedes the security property value defined here.

• The lesson also looks at Serialization, which lets a program write whole objects out to streams and read them back again.
• Note that this extension does not apply to TLS 1.1 and previous versions.
• By default, the deserialization of java objects from javaSerializedData and javaReferenceAddress attributes is allowed.
• Note that the default value might change in a future update release of the JDK.
• Client-side FTP support in the Java platform is available through the FTP URL stream protocol handler, henceforth referred to as the FTP Client.
• In older releases, JCE jurisdiction files had to be downloaded and installed separately to allow unlimited cryptography to be used by the JDK.
• Third-party implementations of these APIs are directly responsible for enforcing their own restrictions.

The Santuario team has adopted a position of keeping their libraries compliant with RFC 2045. Java SE Subscription customers managing JRE updates/installs for large number of desktops should consider https://remotemode.net/ using Java Advanced Management Console (AMC). Java SE Subscription customers managing JRE updates/installs for large number of desktops should consider
using Java Advanced Management Console (AMC).

221 Update Release Notes

Previously, a SecurityException would have been thrown when access to a URL was denied. If required to revert to the old behavior, this change can be disabled by setting the jdk.net.URLClassPath.disableRestrictedPermissions system property. SunJSSE allows SHA224 as an available signature and hash algorithm for TLS 1.2 connections.

The specification of javax.crypto.CipherOutputStream has been clarified to indicate that this class catches BadPaddingException and other exceptions thrown by failed integrity checks during decryption. These exceptions are not re-thrown, so the client is not informed that integrity checks have failed. These applications can use the Cipher API directly as an alternative to using this class.

Java 21 updates

Those releases should not be impacted unless security providers are modified. The full version string for this update release is 1.7.0_141-b11 (where “b” means “build”). Any TLS server certificate chain containing a SHA-1 certificate (end-entity or intermediate CA) and anchored by a root CA certificate included by default in Oracle’s JDK is now blocked by default. TLS Server certificate chains that are anchored by enterprise or private CAs are not affected.

Support has been added for the SHA224withDSA and SHA256withDSA signature algorithms and for DSA keys with sizes up to 2048 bits. Previously, only DSA keys with sizes up to 1024 bits were supported. The jarsigner tool has been enhanced to show details of the algorithms and keys used to generate a signed JAR file and will also provide an indication if any of them are considered weak. The full version string for this update release is 1.7.0_131-b12 (where “b” means “build”). The issue can arise when the server doesn’t have elliptic curve cryptography support to handle an elliptic curve name extension field (if present). By default, JDK 7 Updates and later JDK families ship with the SunEC security provider which provides elliptic curve cryptography support.

JDK 1.0

It has advantages like high-level security, load balancing, and clustering. Thank you for downloading this release of the JavaTM Platform, Standard Edition Development Kit (JDKTM). The JDK is a development environment for building applications, applets, and components using the Java programming language.

• This includes algorithms and parameters for key protection, certificate protection, and MacData.
• To revert to the previous behavior set the system property jdk.lang.Process.allowAmbiguousCommands to true.
• The jarsigner tool now shows more information about the lifetime of a timestamped JAR.
• With this release, the name of the ZipEntry instance returned from java.util.zip.ZipFile.getEntry() always ends with / for any zip directory entry.

JDK 7 is a superset of JRE 7, and contains everything that is in JRE 7, plus tools such as the compilers and debuggers necessary for developing applets and applications. JRE 7 provides the libraries, the Java Virtual Machine (JVM), and other components to run applets and applications written in the Java programming language. Note that the JRE includes components not required by the Java SE specification, including both standard and non-standard Java components.