JDK 7u431 Update Release Notes

Java™ SE Development Kit 7, Update 431 (JDK 7u431) - Restricted

Release date: July 16, 2024

The full version string for this update release is 7u431-b04 (where "b" means "build"). The version number is 7u431.

As of July 2022, Java 7 has ended its service life. Oracle provides this restricted binary with and for the sole purpose of running some Oracle products. Please contact Oracle Support for more information.

IANA TZ Data 2024a

For more information, refer to Timezone Data Versions in the JRE Software.

Security Baselines

The security baseline for the Java Runtime at the time of the release of JDK 7u431 is specified in the following table:

Java Family Version	Security Baseline (Full Version String)
7	7u431-b04

Keeping the JDK up to Date

Oracle recommends that the JDK is updated with each Critical Patch Update. In order to determine if a release is the latest, the Security Baseline page can be used to determine which is the latest version for each release family.

Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Bulletins. It is not recommended that this JDK (version 7u431) be used after the next critical patch update scheduled for October 15, 2024.

Java Management Service, available to all users, can help you find vulnerable Java versions in your systems. Java SE Subscribers and customers running in Oracle Cloud can use Java Management Service to update Java Runtimes and to do further security reviews like identifying potentially vulnerable third party libraries used by your Java programs. Existing Java Management Service user click here to log in to your dashboard. The Java Management Service Documentation provides a list of features available to everyone and those available only to customers. Learn more about using Java Management Service to monitor and secure your Java Installations.

For systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 7u431) on 2024-11-15. After either condition is met (new release becoming available or expiration date reached), the JRE will provide additional warnings and reminders to users to update to the newer version. For more information, see 23.1.2 JRE Expiration Date in the Java Platform, Standard Edition Deployment Guide.

Other Notes

security-libs/java.security

➜ Added GlobalSign R46 and E46 Root CA Certificates (JDK-8316138)

The following root certificates have been added to the cacerts truststore:

+ GlobalSign

  + globalsignr46
    DN: CN=GlobalSign Root R46, O=GlobalSign nv-sa, C=BE

+ GlobalSign
  + globalsigne46
    DN: CN=GlobalSign Root E46, O=GlobalSign nv-sa, C=BE

Bug Fixes

This release also contains fixes for security vulnerabilities described in the Oracle Critical Patch Update (CPU) Jul 2024 for Oracle Java SE (Doc ID 2992318.1).

The following table lists the additional bug fixes included in the JDK 7u431 release:

#	BugId	Component	Summary
1	JDK-8323243	hotspot/runtime	JNI invocation of an abstract instance method corrupts the stack