Update Release Notes

Changes in 1.6.0_17 (6u17)

The full internal version number for this update release is 1.6.0_17-b04 (where «b» means «build»). The external version number is 6u17.

OlsonData 2009m

6u17 contains Olson time zone data version 2009m. For more information, refer to Timezone Data Versions in the JRE Software .

Security Baseline

6u17 specifies the following security baselines for use with Java Plug-in technology:

JRE Family Version	Java SE Security Baseline	Java SE for Business Security Baseline
6	1.6.0_17	1.6.0_17
5.0	1.5.0_22	1.5.0_22
1.4.2	1.4.2_19	1.4.2_24

Root Certificates

Root Certificates are included in this release.

• Added one new root certificate for SECOM. (Refer to 6872579.)
• Added one new root certificate for GlobalSign. (Refer to 6860447.)

Blacklist Entries

There are no new blacklist entries in this update release.

Bug Fixes

This release contains fixes for one or more security vulnerabilities.

Bug fixes for vulnerabilities are listed in the following table.

BugId	Category	Subcategory	Description
6631533	java	classes_2d	ICC_Profile allows detecting if some files exist
6815780	java	classes_2d	TrueType font parsing crash when stressing Sun Bug 6751322 test case
6822057	java	classes_2d	X11 and Win32GraphicsDevice don’t clone arrays returned from getConfigurations()
6862969	java	classes_2d	JPEG JFIF Decoder issue
6862970	java	classes_2d	Image Color Profile parsing issue
6872357	java	classes_2d	JRE AWT setDifflCM vulnerable to Stack Overflow
6872358	java	classes_2d	JRE AWT setBytePixels vulnerable to Heap Overflow
6664512	java	classes_awt	Component and [Default]KeyboardFocusManager pass security sensitive objects to loggers
6636650	java	classes_lang	(cl) Resurrected ClassLoaders can still have children
6861062	java	classes_security	Disable MD2 in certificate chain validation
6863503	java	classes_security	SECURITY: MessageDigest.isEqual introduces timing attack vulnerabilities
6864911	java	classes_security	ASN.1/DER input stream parser needs more work
6854303	java	classes_sound	Sun Java HsbParser.getSoundBank Stack Buffer Overflow Vulnerability
6657026	java	classes_swing	Numerous static security flaws in Swing (findbugs)
6657138	java	classes_swing	Mutable statics in Windows PL&F (findbugs)
6824265	java	classes_util_i18n	(tz) TimeZone.getTimeZone allows probing local filesystem
6632445	java	imageio	DoS from parsing BMPs with UNC ICC links
6862968	java	imageio	JPEG Image Writer quantization problem
6874643	java	imageio	ImageI/O JPEG is vulnerable to Heap Overflow
6869694	java	install	java update malfunctioning
6869752	java_deployment	deployment_toolkit	Deployment Toolkit plugin «launch» method vulnerable to exploits
6872824	javawebstart	general	arbitary code execution using java web start
6870531	javawebstart	other	REGRESSION:have problem to run JNLP app and applets with signed Jar files

Other bug fixes are listed in the following table.

Itanium 1.6.0_17 Release Notes

Update Release Notes Index

About 1.6.0_17 (6u17) for the Itanium® architecture

1.6.0_17 for the Itanium® architecture is a port of JDK 6 update 17 to the Itanium® (64 bit) architecture.

The full internal version number for this update release is 1.6.0_17-b0405 (where «b» means «build»). The external version number is 6u17. Included in JDK 6u17 for the Itanium® architecture is version 14.3 of the Java HotSpot Server Virtual Machine.

The following JDK, JRE tools are not included in JDK, JRE 6u17 for the Itanium® architecture release:

• Java Plug-in
• Java Web Start
• Java Update
• JavaDB (JavaDB is included only into Linux self-extracting JDK distributive)
• Java VisualVM

Please refer to JDK tools and Utilities for JDK tools description.

Only offline installation is available for JDK, JRE 6u17 for the Itanium® architecture.

Changes in 1.6.0_17 (6u17) for the Itanium® architecture

• See changes in 1.6.0_17 common for all platforms in Java SE 6 Update 17 Release Notes.
• Bug fixes

This release contains a number of bug fixes in Java HotSpot Server Virtual Machine and fixes for one or more security vulnerabilities. For more information, please see Sun Alerts 269868, 269869, 269870, 270474, 270475, 270476.

Other bug fixes are listed in the following table.

BugId	Category	Subcategory	Description
6885963	java	classes_2d	Graph 2D object is fuzzy when displayed on Windows Itanium 2003/2008

The following set of command line options are recommended for running high performance server applications:

Supported System Configurations

Platform	Version	Desktop Managers	Browsers	JRE	JDK
Windows 64 bit
Windows IA64	Windows Server 2003 SP2	Windows/Active for Windows	64-bit Install	64-bit Install
	Windows Server 2008 for Itanium-based Systems SP1
Linux 64 bit
Linux IA64	Linux Suse Enterprise Linux Server 9 SP4, Suse Enterprise Linux Server 10 SP2	N/A		64-bit Install	64-bit Install
	Red Hat Enterprise Linux 4.0 U7, Red Hat Enterprise Linux 5.0 U2

JDK, JRE Installation for Microsoft Windows (Itanium® architecture)

The installation procedure installs the JDK or JRE 6u17 but not the Java Plugin or Java Web Start or public Java Runtime Environment (when JDK is installed).

To install, download jdk-6u17-windows-ia64.exe or jre-6u17-windows-ia64.exe file and then follow the 32-bit Windows JDK installation or 32-bit Windows JRE installation «Windows Offline Installation» instructions.

JDK, JRE Installation for Linux (Itanium® architecture)

The installation procedure installs the JRE or JDK 6u17 but not the Java Plugin or Java Web Start or the public Java Runtime Environment (when JDK is installed).

The JDK, JRE for Linux 64-bit comes bundled in two install formats:

• Linux self-extracting files jdk-6u17-linux-ia64.bin, jre-6u17-linux-ia64.bin and
• Linux RPM in self-extracting files jdk-6u17-linux-ia64-rpm.bin, jre-6u17-linux-ia64-rpm.bin.

To install, download the necessary file and then follow the 32-bit Linux JDK installation or 32-bit Linux JRE installation instructions.

Known installation issues

• On Linux systems (specifically, on SLES 9) *-rpm.bin installation can report dmidecode unaligned access:

The bundles install successfully. Message printing can be disabled by the ‘prctl —unaligned=silent’ command.

The message is a warning for a user that the application (dmidecode) works inefficiently from performance perspective. The issue is resolved in dmidecode 2.7.

On Linux systems, when the *-rpm.bin file is used for JDK (JRE) installation, JDK (JRE) of a lower version cannot be installed if JDK (JRE) of a higher version is already installed on the same system.

For example, JDK (JRE) 6u16 cannot be installed using the jdk(jre)-6u16-linux-ia64-rpm.bin file if, on the same machine, JDK (JRE) 6u17 was previously installed using jdk(jre)-6u17-linux-ia64-rpm.bin.

Preparing. ########################################### [100%] package jdk-1.6.0_17-fcs (which is newer than jdk-1.6.0_16-fcs) is already installed p JDK (JRE) 6u16 is not installed.

• Uninstall JDK (JRE) 6u17, then, install JDK (JRE) 6u16 using jdk(jre)-6u16-linux-ia64-rpm.bin, or
• Install JDK (JRE) 6u16 using the jdk(jre)-6u16-linux-ia64.bin file

If JDK (JRE) 6u17 was installed using jdk(jre)-6u17-linux-ia64.bin, installation of JRE (JDK) 6u16 using jre(jdk)-6u16-linux-ia64.bin passes successfully.

On Windows systems after installation of JDK (or JRE) the registry keys «HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Development Kit\1.6» (for JDK), «HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6» (for JRE) should contain the value «JavaHome» with the full path name of the directory in which JDK (or JRE) of the highest version is installed.

After installation of JDK (or JRE) of a lower version on top of a higher version (for example, 6u16 on top of 6u17), «JavaHome» contains the path to the last installed JDK (or JRE) instead of the path to the JDK (or JRE) of the highest installed version. After deinstallation the value is removed.

The workaround is to put the correct value to the Windows registry manually. A more accurate workaround is to uninstall the previously installed JDK (or JRE) and install the required version. See Deploying the JRE on Windows for more details about registry values.
On Windows consecutive JDK/JRE installations/uninstallations can lead (very rarely) to:

Error 1334.The file ‘javaw.exe’ cannot be installed because the file cannot be found in cabinet file ‘Data1.cab’. This could indicate a network error, an error reading from the CD-ROM, or a problem with this package

Internal Error 2356. Data1.cab

The second case can block installation/uninstallation, as the installer reports that there is a suspended installation process. A reboot of the system helps. After the reboot, please, uninstall the previously installed JDK/JRE. Confirm the message, if it appears:

Error 1704.An installation for Java(TM) SE Runtime Environment 6 Update 17 is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?

Known issues and limitations

• The Garbage First (G1) garbage collector and Compressed object pointers are not yet ported to the Itanium® architecture. They will be available in JDK, JRE for the Itanium® architecture in one of the nearest releases.
• Optimizations using Escape Analysis are not well tested on the Itanium® architecture; they are switched off by default.
• The JVM can intermittently crash with SIGILL on Linux RHEL4 for the Itanium® architecture when executed from an NFS mounted directory.

This is a known bug in kernels of versions less than 2.6.22. Processors older than Montecito (e.g. Madison, McKinley) are not affected.

RHEL4 (Nahant Update 5), kernel 2.6.9-55.EL has this bug. In RHEL5.2(Tikanga), kernel 2.6.18-92.el5 the bug is fixed.

Java 6 бесплатно

11 декабря 2006 года состоялся релиз Java 6 (JRE 6). С этой версии программы была изменена официальная индексация и теперь вместо десятичного значения 6.0, версия обозначается одной основной цифрой.

В русской транскрипции название звучит, как «Джава 6», но некоторые пользователи называют ее «Ява 6». В сравнении с пятой версией увеличилась скорость вычислений (на 70%), в 2 раза возросла скорость операций ввода и вывода, а также улучшилась работоспособность OpenGL и DirectX, появилась возможность работы с файлами gif.

Информация о программе

Java Runtime Environment представляет собой исполнительную среду, выпущенную компанией Sun Microsystems. С ее помощью разработчики смогут пользоваться приложениями, написанными на языке Ява.

В структуре Джава 6 (JRE 6):

1. Виртуальная машина Java Virtual Machine.
2. Библиотека Джава-классов.

Джава стала основой для создания множества игр и программ, в особенности тех, для которой особую роль играет мобильность. В сети некоторые веб-страницы также используют Java.

Преимуществом данного языка программирования является кроссплатформенность. Все приложения, созданные на его базе, могут быть использованы на оборудовании с операционными системами, где предустановлен Java Runtime Environment.

Джава 6 обеспечивает для пользователей следующие возможности:

1. Возможность играть в онлайн-игры.
2. Просмотр изображений в 3D – формате и пр.

Разработчиком Java SE Runtime Environment является компания Oracle (до 2010 года — Sun Microsystems). Распространение осуществляется бесплатно с возможностью покупки дополнительных элементов.

Джава 6 обладает следующими особенностями:

1. Возможность автоматического управления памятью.
2. Наличие расширенных способностей по обработке нестандартных ситуаций.
3. Многочисленные средства фильтрации ввода и вывода.
4. Классы, которые позволят исполнять HTTP-запросы с последующей обработкой ответов.
5. Наличие коллекций (стек, массив, перечень и пр.).
6. Унификация доступа к базам данных.
7. Поддержка шаблонов.
8. Возможность параллельного исполнения программ.
9. Возможность использования обычных средств творения сетевых прибавлений, включая протокола RMI.

Таким образом, использование Ява 6 стало важным подспорьем для многих программистов и компаний, ведущих бизнес в сети. К примеру, такие гиганты, как Amazon, eBay, LinkedIn, Yahoo! И пр. уже давно пользуются Ява для реализации собственных проектов.