News

For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 7u231) on November 15, 2019. For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 7u241) on February 14, 2020. For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 7u251) on May 14, 2020.

The BPR releases are listed below in date order, most current BPR first. Note that bug fixes in previous BPRs are also included in the current BPR. The following sections summarize changes made in all Java SE 7u9 BPR releases. The following sections summarize changes made in all Java SE 7u10 BPR releases. The following sections summarize changes made in all Java SE 7u11 BPR releases. The following sections summarize changes made in all Java SE 7u17 BPR releases.

Java 8 updates

If necessary, and at your own risk, you can work around the restrictions by removing “SYMANTEC_TLS” from the jdk.security.caDistrustPolicies security property in the java.security configuration java 7 certifications file. The full version string for this update release is 1.7.0_221-b08 (where “b” means “build”). The full version string for this update release is 1.7.0_231-b08 (where “b” means “build”).

The following sections summarize changes made in all Java SE 7u281 BPR releases. The following sections summarize changes made in all Java SE 7u291 BPR releases. The following sections summarize changes made in all Java SE 7u301 BPR releases.

Java Versions and Features

When the system property, jdk.security.useLegacyECC, is explicitly set to “true” (the value is case-insensitive) the JDK uses the old, native implementation of ECC. Setting the option to true or the empty string is not recommended. As a workaround, users can revert to the previous size by setting the jdk.tls.ephemeralDHKeySize system property to 1024 (at their own risk). The JDK TLS implementation supports FFDHE and it is enabled by default.

• For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 7u211) on May 16, 2019.
• For compatibility, use the keystore.pkcs12.legacy system property, which will revert the algorithms to use the older, weaker algorithms.
• The workaround is to use the -sigalg option of keytool and specify SHA1withDSA.
• For more information on signing applications, see Understanding Signing and Verification.
• In 7u171, the RSA implementation in the SunRsaSign provider will reject any RSA public key that has an exponent that is not in the valid range as defined by PKCS#1 version 2.2.

This JRE (version 7u211) will expire with the release of the next critical patch update scheduled for April 16, 2019. This JRE (version 7u231) will expire with the release of the next critical patch update scheduled for October 15, 2019. https://remotemode.net/ This JRE (version 7u241) will expire with the release of the next critical patch update scheduled for January 14, 2020. This JRE (version 7u251) will expire with the release of the next critical patch update scheduled for April 14, 2020.

Java SE 7 Features and Enhancements from JDK 7 Release Notes

This JRE (version 7u151) will expire with the release of the next critical patch update scheduled for October 17, 2017. This JRE (version 7u161) will expire with the release of the next critical patch update scheduled for January 16, 2018. Support has been added for the TLS session hash and extended master secret extension (RFC 7627) in JDK JSSE provider. However, if the extension is enabled or negotiated, the server certificate changing restriction is not necessary and will be discarded accordingly. In case of compatibility issues, an application may disable negotiation of this extension by setting the System Property jdk.tls.useExtendedMasterSecret to false in the JDK.

• TLS Server certificates issued on or before April 16, 2019 will continue to be trusted until they expire.
• The following sections summarize changes made in all Java SE 7u191 BPR releases.
• Due to the more rigorous procedure of reading a keystore content, some keystores (particularly, those created with old versions of the JDK or with a JDK from other vendors) might need to be regenerated.
• The full version string for this update release is 1.7.0_131-b12 (where “b” means “build”).
• For a more complete list of the bug fixes included in this release, see the JDK 7u261 Bug Fixes page.

The following sections summarize changes made in all Java SE 7u21 BPR releases. The following sections summarize changes made in all Java SE 7u25 BPR releases. The following sections summarize changes made in all Java SE 7u40 BPR releases. The following sections summarize changes made in all Java SE 7u45 BPR releases. The following sections summarize changes made in all Java SE 7u51 BPR releases.