HP-UX 11i Java™ JDK, JRE, and Plug-In Version 5.0.
© Copyright 2014 Hewlett-Packard Development Company, L.P. Legal Notices Reproduction, adaptation, or translation without prior written permission is prohibited, except as allowed under the copyright laws. UNIX is a registered trademark of The Open Group. Java is a registered trademark of Oracle and/or its affiliates.
Contents HP secure development lifecycle...................................................................................................5 1 HP-UX 11i Java™ JDK, JRE, and Plug-In version 5.0.30 release notes..............................................6 Overview................................................................................................................6 2 What is new in 5.0.30 release..................................................................................................
SerialVersionUID mismatch (ISV Issue).......................................................................22 PA-RISC 32-bit applications will use both LD_LIBRARY_PATH and SHLIB_PATH.................23 6 Documentation feedback........................................................................................................
HP secure development lifecycle Starting with HP-UX 11i v3 March 2013 update release, HP secure development lifecycle provides the ability to authenticate HP-UX software. Software delivered through this release has been digitally signed using HP's private key. You can now verify the authenticity of the software before installing the products, delivered through this release. To verify the software signatures in signed depot, the following products must be installed on your system: • B.11.31.
1 HP-UX 11i Java™ JDK, JRE, and Plug-In version 5.0.30 release notes Overview The JDK, JRE, and Plug-In version 5.0.30 for HP-UX for the Java 2 Platform Standard Edition provide the tools for developing and deploying Java applications on HP-UX 11i HP Integrity and HP 9000 PA-RISC systems. For more information about what HP-UX releases are supported, see “HP-UX system requirements” (page 11).
2 What is new in 5.0.30 release Following new features are included in JDK/JRE 5.0.30 release from HP. • “Equivalent Oracle release” (page 7) • “HotSpot JVM” (page 7) • “Problem fixes” (page 8) • “Defect fixes in this release” (page 8) • “Security fixes in this release” (page 8) Equivalent Oracle release This HP JDK 5.0.
Problem fixes Known Oracle bugs are documented in the Oracle Bug Database at http://bugs.sun.com/ bugdatabase/ (login required). For known HP platform-specific Java problems, see “Performance Degradation in BigInteger class (HP Integrity 64-bit only)” (page 20). This HP JDK 5.0.30 release includes the functionality, enhancements, and fixed defects equivalent to Oracle releases up to and including Java 5u55, 5u61, and 5u65, as well as certain HP platform-specific fixed defects. The HP JDK 5.0.
CVE Component Note CVE-2014-0451 AWT See Note 2 CVE-2014-0446 Libraries See Note 2 CVE-2014-2427 Sound See Note 2 CVE-2014-0460 JNDI See Note 1 CVE-2013-6629 AWT See Note 1 CVE-2014-2401 2D See Note 2 CVE-2014-0453 Security See Note 1 CVE-2014-2398 Javadoc See Note 3.
NOTE: 1. Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. 2. Applies to client deployment of Java only.
3 Installation Patches *** IMPORTANT NOTE for PA-RISC Customers! *** The following networking patch must be installed for HP-UX 11.11 (11i v1) PA-RISC. The patch is not required for Itanium, or for other PA-RISC systems. • HP-UX 11.11 (11i v1) PA-RISC Required patch PHNE_29887 (or its superseded patch) solves socket problems that may cause hangs. The pthreads patch shown below must be installed for HP-UX 11.11 (11i v1) PA-RISC. The patch is not required for HP Integrity systems. • HP-UX 11.
Installation instructions From the JDK, JRE, and Plug-In 5.0.x Downloads and Documentation page, select (click) a JDK/JRE 5.0.x version to download from the “JDK/JRE 5.0.x Downloads” list. This displays the download page for that version (for example, https:// h20392.www2.hp.com/portal/swdepot/try.do?productNumber=JDKJRE5030 for 5.0.30). Select one of the depot or tar files listed, and download to a local directory. NOTE: Beginning with the JDK/JRE 5.0.
http://www.hp.com/go/hpux-java-docs. PA-RISC add-on package An add-on package for PA-RISC systems is available for C++ applications compiled with the -AA option: • Integrity systems: The PA add-on package is not required for applications running natively on Integrity systems. If your Integrity system includes the PA add-on, swinstall displays a message indicating that you can remove it if you would like to reclaim the disk space.
SD-UX prepends to the default product path. Java will therefore install in //opt/java1.5. If you want your Java home directory in without the /opt/java1.5 directories, you need to install into a temporary directory, and then move the directories to where you want them. For example: JDK: swinstall -s Jdk15.JDK15-* Jre15.JRE15-* @/ mv /opt/java1.
| ________________________|________________________________________ | | | | | | | rt.jar charsets.jar jce.jar zi security jsse.jar PA_RISC2 PA_RISC2.0W IA64N IA64W |_________|___________|_________|___ | | | | server server server server The tools are under opt/java1.5/bin and the libraries are under opt/java1.5/ lib. The tools.jar file contains the classes for supporting the tools and utilities. The file dt.jar contains the DesignTime archive of BeanInfo files.
Information on Mozilla for HP-UX can be found at Mozilla Web Browser for HP-UX Downloads and Documentation. Additional Plug-in documentation and FAQs can be found at http://www.oracle.com/technetwork/java/index-jsp-141438.html. Removing support for unwanted architectures in the JRE Under the JRE license agreement, partners who redistribute the JRE may remove support for unwanted architectures. Functional components may NOT be removed under any circumstances.
For information about the PA add-on bundle required to run C++ applications compiled with -AA, see “PA-RISC add-on package” (page 13).
4 Usage documentation For the usage of documentation for developers, see the HP-UX Programmer's Guide for Java 2 under “User guide” at http://www.hp.com/go/hpux-java-docs. There you will find information on HotSpot options, HP-specific options and features, suggestions and examples for allocating memory, how to use WDB to examine backtraces in Java threads, code examples for using Java Native Interface, and more. You might find the JDK/JRE 5.0.n Usage Notes appendix useful. Change in loading of .
5 Known issues The following are known problems for HP-UX 11i Integrity and HP 9000 PA-RISC systems. Some of the solutions require installing patches. For more information on locating and installing patches, see the HP-UX Java Patch Information web page at:. http://ftp.hp.com/pub/softlib/hpuxjava-patchinfo/index.html. Running Java applications with hyperthreading enabled Prior to JDK 5.0.27, java applications might crash with a SEGV in interpreter code on systems with hyperthreading enabled.
Performance Degradation in BigInteger class (HP Integrity 64-bit only) A performance degradation in the JDK/JRE 5.0.26 and later in the java/math/BigInteger class could have a small negative impact on some 64-bit Java applications. One 64-bit Java benchmark that makes heavy use of the BigInteger class degraded by 10% compared to JDK/JRE 5.0.25. The negative impact, if any, for most 64-bit Java applications will be much smaller. Recommend setting PTHREAD_SUSPEND_SYNC to 1 under certain conditions (HP-UX 11.
have yet installed its handlers, and the failures may appear as random exceptions. The solution is to ensure you have enough stack space. Using compiler safepoints (HP-UX 11.11 (11i v1) PA-RISC) Using compiler safepoints guarantees a more deterministic delay to stop all running Java threads before doing an operation requiring a safepoint synchronization, such as a garbage collection. The compiler safepoints feature is enabled by default beginning with Java 5.0.
Using linker option +noenvvar and +compat on HP Integrity and PA-64 systems If your application links with libjvm and uses the JNI interface APIs to load the JVM directly, do not use the linker options +noenvvar or +compat on HP Integrity or PA-64 systems. Running Java with setuid or setgid on HP Integrity and PA systems Java requires dynamic loading (SHLIB_PATH, LD_LIBRARY_PATH) which are disabled in setuid or setgid executables. Therefore, Java cannot run with setuid or setgid.
Parsing Failure in config.xml: javax.xml.namespace.QName; local class incompatible: stream classdesc serialVersionUID = 4418622981026545151, local class serialVersionUID = -9120448754896609940 To workaround this problem, modify: /Weblogic9x/common/bin/commEnv.sh file to include the following command: JAVA_OPTIONS="$JAVA_OPTIONS Dcom.sun.xml.namespace.QName.useCompatibleSerialVersionUID=1.0" Alternatively, you can use the command line option: export JAVA_OPTIONS="$JAVA_OPTIONS Dcom.sun.xml.
6 Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hp.com). Include the document title and part number, version number, or the URL when submitting your feedback. nl For more information about support policies of HP-UX, see HP-UX support policy.