Download Free Java Runtime Environment (JRE) (64-Bit)
What's new in version 7 Update 45
New Features and Changes
- Protections Against Unauthorized Redistribution of Java Applications:
Starting with 7u45, application developers can specify new JAR manifest file attributes:- Application-Name: This attribute provides a secure title for your RIA.
- Caller-Allowable-Codebase: This attribute specifies the codebase/locations from which JavaScript is allowed to call Applet classes.
- JavaScript to Java calls will be allowed without any security dialog prompt only if::
- JAR is signed by a trusted CA, has the Caller-Allowable-Codebase manifest entry and JavaScript runs on the domain that matches it.
- JAR is unsigned and JavaScript calls happens from the same domain as the JAR location.
- The JavaScript to Java (LiveConnect) security dialog prompt is shown once per Applet classLoader instance.
- Application-Library-Allowable-Codebase: If the JNLP file or HTML page is in a different location than the JAR file, the Application-Library-Allowable-Codebase attribute identifies the locations from which your RIA can be expected to be started.
- If the attribute is not present or if the attribute and location do not match, then the location of the JNLP file or HTML page is displayed in the security prompt shown to the user.
- Note that the RIA can still be started in any of the above cases.
- Restore Security Prompts
- A new button is available in the Java Control Panel (JCP) to clear previously remembered trust decisions. A trust decision occurs when the user has selected the Do not show this again option in a security prompt. To show prompts that were previously hidden, click Restore Security Prompts. When asked to confirm the selection, click Restore All. The next time an application is started, the security prompt for that application is shown.
- Starting from JDK 7u45, the following new processing limits are added to the JAXP FEATURE_SECURE_PROCESSING feature.
- totalEntitySizeLimit
- maxGeneralEntitySizeLimit
- maxParameterEntitySizeLimit
- The java.util.TimeZone.setDefault(TimeZone) method has been changed to throw a SecurityException if the method is called by any code with which the security manager's checkPermission call denies PropertyPermission("user.timezone", "write"). The new system property jdk.util.TimeZone.allowSetDefault (a boolean) is provided so that the compatible behavior can be enabled. The property will be evaluated only once when the java.util.TimeZone class is loaded and initialized.
- Bug fixes: This release contains fixes for security vulnerabilities.
General
- Publisher
- Publisher web site
- Release date
- Date added
- Version
Category
- Category
- Subcategory
System requirements
- Operating systems
- Additional requirements
Download information
- File size
- File name
Popularity
- Total Downloads
- Downloads last week
Pricing
- License model
- Limitations
- Price
JAXP Changes
TimeZone.setDefault Change