#Parallels update notes install#
#Parallels update notes serial#
#Parallels update notes full#

Java JAR Pack200 Decompression Integer Overflow Vulnerability Mutable statics in imageio plugins (findbugs) ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are mutable static (findbugs) NPE is thrown in jemmy library since 6u15 b01 at .SynthContext.isSubregion() Synth Region.uiToRegionMap/lowerCaseNameMap are mutable statics

#Parallels update notes full#

JDK13Services.getProviders creates instances with full privileges JDK13Services allows read access to system properties from untrusted code RmfFileReader/StandardMidiFileWriter.types are public mutable statics (findbugs) Proxy is assumed to be immutable but is non-finalĪbstractSaslImpl.logger is a static mutable (findbugs)

Remote sites can compromise user privacy and possibly hijack web session Java Web Start JPEG header parsing needs more scruityĮncoder allows reading private variables with certain names It is possible to reposition the security icon too far from the border of the window on X11 Security Warning Icon is missing in Windows 2000 Prof from Jdk build 6u12 This release contains fixes for one or more security vulnerabilities.īug fixes for vulnerabilities are listed in the following table.ĪccessibleResourceBundle.getContents exposes mutable static (findbugs)Ĭursor.predefined is protected static mutable (findbugs) The work around is to explicitly select the Parallel Scavenge collector using the command line option -XX:+UseParallelGC.

#Parallels update notes serial#

Note that the Serial garbage collector ( -XX:+UseSerialGC) is vulnerable to this problem and is selected by default on some platforms. This may cause confusion in thread based JDI events. Java ™ Debug Interface (JDI) ThreadReferences have an embedded thread ID that depends on JVM TI object tags, thus the embedded thread ID may change unexpectedly. When other collectors are used, breakpoints may stop functioning, and JVM TI object tags may become unusable after a full GC operation is performed. Java ™ Virtual Machine Tool Interface (JVM TI) breakpoints are reliable only when either the Parallel Scavenge garbage collector ( -XX:+UseParallelGC) or the Parallel Compacting garbage collector ( -XX:+UseParallelOldGC) is used. For more information see the Blacklist Jar Feature section in the 6u14 Release Notes.

#Parallels update notes install#

Note: Users should install JDK and JRE 6 Update 15 or later on systems running JDK and JRE 5.0 and SDK and JRE 1.4.2 to take advantage of this blacklist feature. This update release includes the following new entry to the Blacklist: Added three new root certificates from Quovadis.Added three new root certificates from Keynectis.Added one new root certificate and removed 3 root certificates from Entrust.

Root Certificates are included in this release. For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer.