United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...

Update Release Notes

Update Release Notes Index JDK Documentation

Update Release Notes Index

Update Release Notes Index

Changes in 1.6.0_19 (6u19)

The full internal version number for this update release is 1.6.0_19-b04 (where "b" means "build"). The external version number is 6u19.

OlsonData 2010b

6u19 contains Olson time zone data version 2010b. For more information, refer to Timezone Data Versions in the JRE Software .

Security Baseline

6u19 specifies the following security baselines for use with Java Plug-in technology:

JRE Family VersionJava SE
Security Baseline
Java SE for Business
Security Baseline
61.6.0_191.6.0_19
5.01.5.0_221.5.0_24
1.4.21.4.2_191.4.2_26

On October 30, 2008, Java SE 1.4.2 reached its end of service life with the release of 1.4.2_19. Java SE 5.0 reached its end of service life on November 3, 2009, with the release of 5.0u22. Future revisions of Java SE 1.4.2 (1.4.2_20 and above) and Java SE 5.0 (5.0u23 and above) include the Access Only option and are available to Java SE for Business subscribers.

For more information about the security baseline, see Deploying Java Applets With Family JRE Versions in Java Plug-in for Internet Explorer .

Root Certificates

Added seven new root certificates, removed three root certificates and five root certificates replaced with stronger signature algorithms from VeriSign, Thawte and GeoTrust. (Refer to 6904162.)

Ensuring Application and Applet Security when Mixing Signed and Unsigned Code

Signed Java Web Start applications and applets that contain signed and unsigned components could potentially be unsafe unless the mixed code was intended by the application vendor. As of this release, when mixed code is detected in a program, a warning dialog is raised. Mixing Signed and Unsigned Code explains this warning dialog and options that the user, system administrator, developer, and deployer have to manage it.

Interim Fix for the Transport Layer Security (TLS) Man-in-the-Middle Attack

For more information about the vulnerability and the interim fix, please see the TLS Renegotiation Issue Readme.

Bug Fixes

This release contains fixes for security vulnerabilities. For more information, please see Oracle Java SE and Java for Business Critical Patch Update advisory.

Other Bug Fixes

BugIdCategorySubcategoryDescription
6423256  hotspotgarbage_collectorGC stacks should use a better data structure
6847956  hotspotgarbage_collectorG1: crash in oopDesc*G1ParCopyHelper::copy_to_survivor_space(oopDesc*)
6648438  hotspotjvmtisrc/share/vm/prims/jvmtiEnv.cpp:457 assert(phase == JVMTI_PHASE_LIVE,"sanity check")
6880029  hotspotruntime_systemJDK 1.6.0_u14p Application crashed very early
6918421  hotspotruntime_systemin-process JVM now ignores preset Windows unhandled exception filter
6932480  hotspotruntime_systemCrash in CompilerThread/Parser. Unloaded array klass?
6828768  idlorbRMI-IIOP EJB clients do not fail over due to defect in JDK 1.6.0_12
6877056  idlorbSVUID calculated for java.lang.Enum is not 0L
6893109  idlorbmemory leak in readObject() and writeObject() using idlj from jdk 1.6.0_14
6859086  javaclasses_2dDialog created by JOptionPane.showMessageDialog does not repaint sometimes
6921593  javaclasses_2dChinese Font PMingLiu not rendered correctly
6904162  javaclasses_securityAdd new VeriSign root CA certificates to JRE and remove some old/unused ones
6713352  javaclasses_swingDeadlock in JFileChooser with synchronized custom FileSystemView
6493942  javaclasses_util_concurrentConcurrentLinkedQueue.remove sometimes very slow
6805775  javaclasses_util_concurrentLinkedBlockingQueue Nodes should unlink themselves before becoming garbage
6609468  javaclasses_util_i18n(rb) ResourceBundle and/or SimpleDateFormat not thread safe (hangs JVM)
6921289  javaclasses_util_i18n(tz) Support tzdata2010b
6739892  javaclasses_util_jarzipImprove handling of zip encoding through use of property flag
6907171  java_deploymentnetworkingPhotoFlockr JavaFX app shows security dialog for net access even though crossdomain allows access
6911230  java_deploymentsecurityPlugin/WebStart cannot validate chains when the chain contains a root cert that has been replaced
6840201  java_pluginpluginRegression: applet.destroy() is interrupted with jdk 6u10, run into completion with 6u7
6893682  java_pluginplugin2Areas of java plugin code ignore jar version settings
6921609  javawebstartapp_mgrregression: JWS does not update desktop shortcut following JNLP update with 6u18 release
6918186  javawebstartgeneraljava web start download dialog should not be displayed when loading from cache
6927663  javawebstartgeneralmain-class fails if loaded by Trusted-Library class loader
6851973  jgsskrb5pluginignore incoming channel binding if acceptor does not set one
6893617  jndicosnamingJDK 6 CNCtx always uses the default ORB and not take java.naming.corba.orb ORB value
6449574  jndildapInvalid ldap filter is accepted and processed