★ wanayoo — archive 1999 https://blogs.oracle.com/java/tags/updateNouvelle recherche | Portail wanayoo

Monday Dec 17, 2012

Java SE 7u10: Enhanced Security Features and Support for New Platforms

By Tori Wieldt on Dec 17, 2012

On December 11, 2012 Oracle released Java SE 7 Update 10 (Java SE 7u10). This release includes enhanced security features and support for new platforms.

Enhanced Security Features

The JDK 7u10 release includes the following security enhancements:

  • The ability to disable any Java application from running in the browser. This mode can be set in the Java Control Panel or (on Microsoft Windows platform only) using a command-line install argument.
  • The ability to select the desired level of security for unsigned applets, Java Web Start applications, and embedded JavaFX applications that run in a browser. Four levels of security are supported. This feature can be set in the Java Control Panel or (on Microsoft Windows platform only) using a command-line install argument.
  • New dialogs to warn you when the JRE is insecure (either expired or below the security baseline) and needs to be updated.

For more information, read Henrik Stahl's blog Oracle JDK 7u10 Released with New Security and the documentation Setting the Level of Security for the Java Client.

New Supported Platforms

Java SE 7 Update 10 (Java SE 7u10) supports Windows 8 Desktop Mode1 with IE 10, and Mac OS 10.8.
 For more information, refer to the Oracle Certified System Configurations page. 

Download and Release Notes

Java SE 7u10 is available on OTN Download Page.
To learn more about the release, please see the Java SE 7u10 Release Notes.
For information about the other Java releases last week, read the Java Source blog "Java SE Updates." 

Category: General

Tags:

Permanent link to this entry | Comments [3]

Thursday Aug 30, 2012

Java Security Update

By Tori Wieldt on Aug 30, 2012

Oracle has just released Security Alert CVE-2012-4681 to address 3 distinct but related vulnerabilities and one security-in-depth issue affecting Java running in desktop browsers.  These vulnerabilities are: CVE-2012-4681, CVE-2012-1682, CVE-2012-3136, and CVE-2012-0547.  These vulnerabilities are not applicable to standalone Java desktop applications or Java running on servers, i.e. these vulnerabilities do not affect any Oracle server based software.

Due to the severity of these vulnerabilities, the public disclosure of technical details and the reported exploitation of CVE-2012-4681 "in the wild," Oracle strongly recommends that customers apply the updates provided by this Security Alert as soon as possible. 

JUG leader John Yeary tweeted "I want to take a moment to THANK #Oracle for doing the right thing. Too often people don't say thanks enough when they get it right." Thanks for your thanks. 

For More Information

Oracle Security Alert for CVE-2012-4681

Change to Java SE 7 and Java SE 6 Update Release Numbers


Category: General

Tags:

Permanent link to this entry | Comments [0]

Wednesday Dec 21, 2011

Updating Java ME Applications

By Janice J. Heiss on Dec 21, 2011

A new article up on otn/java, by Java ME expert Vikram Goyal, titled “Updating Java ME Applications,” demonstrates how easy it is to update the text, images, and source code for Java ME applications. Goyal explains that updating a Java ME application includes updating static data, such as text and images, as well as code components of the application. In the article, he develops a sample app that illustrates how to update an application.

As Goyal explains, “The article starts with the basics—updating simple text strings—and then moves to updating images. Finally, the article shows the easiest way to update the core application files, which Java ME makes quite easy. However, this ease can come at a price in terms of extra network traffic.”

Goyal concludes the article with some basic advice:

“If you don’t need to update the entire source code for your application, use the connection classes provided within the javax.io package, such as ContentConnection and HttpConnection, to update static data, such as text and images.

On the other hand, if you need to provide a mechanism for updating the entire source code, make sure you follow a valid update process on the server, and use platformRequest(String) with a URL that ends in jad to provide the updates. The device’s interface will then make sure the updates are applied by removing the old MIDlet and installing the new updated version.”

Read the complete article here.



Category: Mobile

Tags:

Permanent link to this entry | Comments [0]

About

Insider News from the Java Team at Oracle!

duke
javeone logo
JavaOne Conference 2012 Content
JavaOne Latin America Dec. 4-6

Links


Search

Archives
« January 2013
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
  
       
Today