Getting Started

Java^TM 2, Standard Edition, v. 1.4.2_13
for SCO^® UNIX^® Operating Systems

This release of Java 2 Standard Edition contains:

the Java 2 Runtime Environment, which allows SCO UNIX end users to run Java applets and applications on SCO UNIX operating systems
the Java 2 Software Development Kit (J2SDK), which enables SCO UNIX OEMs, ISVs, and end users to develop Java applets and applications that conform to the Java 2 Core API
the Java 2 Plug-In for the Mozilla browsers released for UnixWare 7.1.4, OpenServer 5.0.7, and OpenServer 6.0.0.

J2SE 1.4.2 for SCO UNIX is a full implementation of the Sun Microsystems^TM Java 2 Platform - the technology and environment described in the Sun^TM specifications of the Java 2 Platform, Standard Edition, v. 1.4.2. (The _13 suffix on the version number indicates the patch level of the Sun J2SE that J2SE 1.4.2 for SCO UNIX corresponds to.)

Changes in This Release

J2SE 1.4.2_13b

J2SE 1.4.2_13 for SCO UNIX is the latest and cumulative update to J2SE 1.4.2. It contains the latest fixes from Sun including DST timezone changes and security issue resolutions for the following announced issues as well as some yet to be announced issues. In addition, the CA Root Certificates file (cacerts) is now populated with the root certificates that we have recieved permission to distribute; see section "Distrubuted CA Certificates" for details
J2SE 1.4.2_13 supercedes the J2SE 1.4.2_12 release previously made available on the SCO Support web site.

A problem with embedded Java JVM initialization within a thread application has been corrected.

Sun Alert ID Description

102648 The JRE and Java Secure Socket Extension (JSSE) may verify incorrect RSA PKCS #1 v1.5 signatures if the RSA public key exponent is 3. This may allow applets or applications that are signed by forged signing certificates and websites with forged web server certificates to be verified as valid.

Sun Alert ID	Description
102648	The JRE and Java Secure Socket Extension (JSSE) may verify incorrect RSA PKCS #1 v1.5 signatures if the RSA public key exponent is 3. This may allow applets or applications that are signed by forged signing certificates and websites with forged web server certificates to be verified as valid.

J2SE 1.4.2_12

J2SE 1.4.2_12 for SCO UNIX is the latest and cumulative update to J2SE 1.4.2. It contains the latest fixes from Sun including timezone changes as well as bug fixes and enhancements for SCO Unix platforms. It supercedes the J2SE 1.4.2_11 release previously made available on the SCO Support web site.

Java option -XX:+UseAltSigs was not honered in previous releases. The option functions as Sun intended in 1.4.2_12.

J2SE 1.4.2_11

J2SE 1.4.2_11 for SCO UNIX, the previous SCO released update to J2SE 1.4.2, contained the latest fixes from Sun including corrections for a yet to be announced security issue as well as bug fixes and enhancements for SCO Unix platforms. It superceded the J2SE 1.4.2_10 release previously made available on the SCO Support web site and released with OpenServer 6.0.0 FCS or MP2.

On OpenServer 5.0.7, the Java VM process (java_vm) started by the Mozilla browser to handle a Java applet would continue to run after the browser was terminated. The problem has been resolved.
Fixes in java.nio.MappedByteBuffer support. Behavior difference and availability of APIs fsync(), fdatasync() and madvise() between Solaris and UnixWare (SVR5) resolved.

J2SE 1.4.2_10

J2SE 1.4.2_10 for SCO UNIX, the previous SCO released update to J2SE 1.4.2, contained the then latest fixes from Sun including corrections for the following security issues as well as bug fixes and enhancements for SCO Unix platforms. It superceded the J2SE 1.4.2_08 release previously made available on the SCO Support web site, released with OpenServer 5.0.7 MP4 or Openserver 6.0.0 FCS or MP1.

The NetworkInterface.getNetworkInterfaces() method was not returning a complete list of network interfaces on an SVR5 system (UnixWare and OpenServer 6.0).
The server option -XX:+AggressiveHeap would not take effect on SVR5 systems because the total physical memory was incorrectly calculated.
The RandonAccessFile() contructor mode "d" (data synchronization) was incorrectly passed to the system open() function with a BSD O_DSYNC flag. While generally inocuous, it could result in an SVR5 kernel memory corruption when opening some devices and eventually result in a system panic.
Availability of LARGEFILE support may not have been correctly detected in JVM runtime initialization.
The jre/lib/font.properties file has been revised to use Lucida fonts provided with the J2SE release. The previous font.properties file has been renamed font.properties.BKUP.

Sun Alert ID Description

102003 Three (3) security vulnerabilities with the use of "reflection" APIs in the Java Runtime Environment may (independently) allow an untrusted applet to elevate its priveleges. For example, an applet may grant itself permissions to read and write local files or execute local applications that are accessible to the user running the untrusted applet.

Sun Alert ID	Description
102003	Three (3) security vulnerabilities with the use of "reflection" APIs in the Java Runtime Environment may (independently) allow an untrusted applet to elevate its priveleges. For example, an applet may grant itself permissions to read and write local files or execute local applications that are accessible to the user running the untrusted applet.

J2SE 1.4.2_08

J2SE 1.4.2_08 for SCO UNIX, the previous SCO released update to J2SE 1.4.2, contained the then latest fixes from Sun including corrections for the following security issues. It superceded the J2SE 1.4.2_06 release previously made available on the SCO Support web site.

Sun Alert ID Description

101749 A vulnerability in the Java Runtime Environment may allow an untrusted applet to elevate its priveleges. For example, an applet may grant itself permissions to read and write local files or execute local applications that are accessible to the user running the untrusted applet.

Sun Alert ID	Description
101749	A vulnerability in the Java Runtime Environment may allow an untrusted applet to elevate its priveleges. For example, an applet may grant itself permissions to read and write local files or execute local applications that are accessible to the user running the untrusted applet.

J2SE 1.4.2_06

J2SE 1.4.2_06 for SCO UNIX was the previous SCO released update to J2SE 1.4.2. It superceded the J2SE 1.4.2_04 release previously on this web site. It contains Java 1.4 2 plug-in support for SCO UNIX Mozilla browsers and the latest set of fixes from Sun including the following security fixes.

Sun Alert ID Description

101523 (57591) A vulnerability in the Java Plug-in may allow an untrusted applet to escalate priveleges through JavaScript to Java communication.

57708 A vulnerability in the Java Plug-in may allow an untrusted applet to inappropriately interfere with another applet in the same web-page including causing it to incorrectly load non-code resources such as files and web pages.

57707 A vulnerability in the Java(TM) Runtime Environment with object deserialization may allow a remote attacker to cause the Java Virtual Machine to become unresponsive, resulting in a denial-of-service condition for the runtime environment and servers that run on the runtime environment.

57613 The XLST processor included with the Java(TM) Runtime Environment may allow an untrusted applet to read data from another applet that is processed using the XSLT processor and may allow the untrusted applet to escalate privileges.

Sun Alert ID	Description
101523 (57591)	A vulnerability in the Java Plug-in may allow an untrusted applet to escalate priveleges through JavaScript to Java communication.
57708	A vulnerability in the Java Plug-in may allow an untrusted applet to inappropriately interfere with another applet in the same web-page including causing it to incorrectly load non-code resources such as files and web pages.
57707	A vulnerability in the Java(TM) Runtime Environment with object deserialization may allow a remote attacker to cause the Java Virtual Machine to become unresponsive, resulting in a denial-of-service condition for the runtime environment and servers that run on the runtime environment.
57613	The XLST processor included with the Java(TM) Runtime Environment may allow an untrusted applet to read data from another applet that is processed using the XSLT processor and may allow the untrusted applet to escalate privileges.

J2SE 1.4.2_04

J2SE 1.4.2_04 for SCO UNIX, available at this download site, is the latest and cumulative update to J2SE 1.4.2. It contains the latest set of fixes from Sun. It supercedes the J2SE 1.4.2_03 release in UnixWare 7.1.4 and OpenServer 5.0.7 MP3.

Sun Alert ID Description

57555 Java Runtime Environment Remote Denial of Service (DoS) Vulnerability

Sun Alert ID	Description
57555	Java Runtime Environment Remote Denial of Service (DoS) Vulnerability

J2SE 1.4.2_03

J2SE 1.4.2 for SCO UNIX is a major new release compared to the previous J2SE 1.3.1 for SCO UNIX. J2SE 1.4.2_03 for SCO UNIX, the initial J2SE 1.4.2 release on SCO UNIX platforms, was part of the UnixWare 7.1.4 and OpenServer 5.0.7 MP3 releases.

System Requirements and Supported Platforms

Supported SCO UNIX platforms:

SCO OpenServer^TM Release 6.0.0 operating system
- requires package urwfonts [*]
UnixWare^® 7.1.4 operating system
- requires package urwfonts [*]
SCO OpenServer^TM Release 5.0.7 operating system
- requires SCO OpenServer Release 5.0.7 Maintenance Pack 3
- requires package urwfonts [*]
- requires package set OSRcompat version 8.0.2 or higher[**]

J2SE 1.4.2 for SCO UNIX is not supported on older versions of the supported operating systems, such as SCO OpenServer Release 5.0.6 or UnixWare 7 Release 7.1.1, nor is it available for older operating systems, such as the SCO UnixWare 2 operating system.

J2SE 1.4.2 for SCO UNIX cannot be used with the older OSRcompat packages that were released together with older versions of UnixWare 7 and OpenServer.

For the most part the J2SE 1.4.2 is identical for all supported platforms, and everything in these release notes applies to all supported platforms unless otherwise noted.

[*] Package urwfonts is available as part of the UnixWare 7.1.3 and 7.1.4 and OpenServer 5.0.7 media kits and is automatically installed as part of Initial System Load if Java is installed. It is also available in the UnixWare 7.1.3 Update Pack 4 media or in the UnixWare and OpenServer Development Kit 7.1.3 or 7.1.4 and is downloadable from this web page.

[**] The required runtime on OpenServer 5.0.7 are the libraries contained in the package set OSRcompat version 8.0.2 provided in the SCO OpenServer Release 5.0.7 Maintenance Pack 3 as the "UDK Compatibility Libraries".

Package Name	Required Software	Approx. Size	Contains
`urwfonts`		3 MB	(URW)++ Free X11 Fonts
`j2jre142`	urwfonts runtime (above)	52 MB	Runtime Support: `java`, the Java virtual machine interpreter (JVM); the "client" and "server" dynamic compilers; Java Foundation Classes (JFC) & Swing Package; and basic API libraries: language support, I/O, AWT, networking, utilities, images, media, math, compression, and security. Distributed applications and database access: Remote Method Invocation (RMI); JavaBeans^TM (component object model); JDBC^TM (database access); Internationalization tools; Security tools; Java IDL tools.
`j2sdk142`	j2jre142	24 MB	Development Tools: `appletviewer`, the Java Applet Viewer; `javac`, the Java Compiler; `jdb`, the command-line Java debugger; `javah`, the C Header and Stub File Generator for native methods; `javap`, the Java Class File Disassembler; `javadoc`, the JAVA API Documentation Generator; `jar`, the Java Archive (JAR) tool; and assorted other commands used in Java development; class libraries used in Java development; header files used in native code development. Also Java demo applets and applications; demos of Swing functionality; Java Plug-in demos; native method demos.
`j2plg142`	j2jre142	2.3 MB	Java 2 Plug-in for Mozilla browser, 1.2.1 through 1.7.x on UnixWare 7.1.4, OpenServer 5.0.7 and OpenServer 6.0.0.

Note: Where one J2SE 1.4.2.1 package requires another J2SE 1.4.2.1 package, the version numbers of the packages must be the same. The Java 2 SDK package, version 1.4.2.1.12 requires the Java 2 Runtime, version 1.4.2.12.

Download and Installation

The J2SE 1.4.2 product is distributed as two separate installable Java packages plus a urwfonts package, if needed.

Installation with the UnixWare package tools on UnixWare, Open UNIX or OpenServer

Print or save a copy of this "Getting Started" page for later reference.
Download a copy of the current J2SE 1.4.2_12 Release Notes (ReleaseNotes.html)and save, also for later reference.

Select and download the packages you wish to install. Note that the packages are available in two formats:

For UnixWare 7.1.4: compressed/uncompressed pkgadd datastream format.

File Package Version

urwfonts.ds.Z urwfonts 2.0

j2jre142.ds.Z j2jre142 1.4.2.13b

j2sdk142.ds j2sdk142 1.4.2.13b

j2plg142.ds j2plg142 1.4.2.13b

File	Package	Version
urwfonts.ds.Z	`urwfonts`	2.0
j2jre142.ds.Z	`j2jre142`	1.4.2.13b
j2sdk142.ds	`j2sdk142`	1.4.2.13b
j2plg142.ds	`j2plg142`	1.4.2.13b

For OpenServer 5.0.7: custom format packages

File Custom Package Custom Version UW Package UW Pkg. Version

OSR5_Java2_JRE_142.VOLS.tar Java2_JRE_142 1.4.2Mb j2jre142 1.4.2.13b

urwfonts 2.0

OSR5_Java2_SDK_142.VOLS.tar Java2_SDK_142 1.4.2Mb j2sdk142 1.4.2.13b

OSR5_Java2_PLUGIN_142.VOLS.tar Java2_PLUGIN_142 1.4.2Mb j2plg142 1.4.2.13b

File	Custom Package	Custom Version	UW Package	UW Pkg. Version
OSR5_Java2_JRE_142.VOLS.tar	Java2_JRE_142	1.4.2Mb	`j2jre142`	1.4.2.13b
`urwfonts`	2.0
OSR5_Java2_SDK_142.VOLS.tar	Java2_SDK_142	1.4.2Mb	`j2sdk142`	1.4.2.13b
OSR5_Java2_PLUGIN_142.VOLS.tar	Java2_PLUGIN_142	1.4.2Mb	`j2plg142`	1.4.2.13b

For OpenServer 6.0.0: custom format package

File Custom Package Custom Version UW Package UW Pkg. Version

OSR6_Java2_142.VOLS.tar j2se142 1.4.2Mb j2jre142 1.4.2.13b

urwfonts 2.0
j2sdk142 1.4.2.13b
j2plg142 1.4.2.13b

javaxcomm 2.0

javasoap 1.2

Download an install any prerequisite packages, runtime, maintenance packs, maintenance supplements, support level supplements as required in the System Requirements and Supported Platforms of this document.
As root, installed the J2SE packages that you have downloaded.
Change directory into the directory containing the downloaded package datastreams
cd <download-dir>

On UnixWare 7.1.4:
Install the J2SE 1.4.2 packages in the following order.
If the package datastreams have been downloaded in compressed format:
zcat urwfonts.ds.Z | pkgadd -d -
zcat j2jre142.ds.Z | pkgadd -d -

pkgadd -d `pwd`/j2sdk142.ds
pkgadd -d `pwd`/j2plg142.ds

If the package datastreams have been uncompressed when downloaded with your browser:
pkgadd -d `pwd`/urwfonts.ds
pkgadd -d `pwd`/j2jre142.ds
pkgadd -d `pwd`/j2sdk142.ds
pkgadd -d `pwd`/j2plg142.ds

On OpenServer 5.0.7, having downloaded the custom format files:
Make a subdirectory for each custom tar file that you downloaded.
mkdir JRE SDK PLUGIN
Unwind each tar file into the corresponding subdirectory.
cd JRE; tar -xf ../OSR5_Java2_JRE_142.VOLS.tar
cd ../SDK; tar -xf ../OSR5_Java2_SDK_142.VOLS.tar
cd ../PLUGIN; tar -xf ../OSR5_Java2_PLUGIN_142.VOLS.tar

Software should be installed in the following order:
- Java 2 Runtime Environment
- Java 2 Software Development Kit
- Java 2 Plug-in
Run the Software Manager with the command:
scoadmin software
or
custom

or double-click on the Software Manager icon in the desktop.
1. Pull down the "Software" menu and select "Install New".
2. When prompted for the host from which to install, choose the local machine and then "Continue".
3. In the "Select Media" menu, pull down the "Media Device" menu. Select "Media Images", then choose "Continue".
4. When prompted for the "Image Directory", enter the directory where you unwound the tar file of the package to be installed and choose "OK".
5. When prompted to select the software to install, the single software package in the directory will by highlighted. Choose "Install".
6. Repeat steps 1 through 5 for each remaining software download file to be installed.
On OpenServer 6.0.0, having downloaded the single custom format file:
Make a subdirectory and unwind the tar file into that subdirectory.
mkdir JAVA142
cd JAVA142; tar -xf ../OSR6_Java2_142.VOLS.tar

Run the Software Manager with the command:
scoadmin software
or
custom

or double-click on the Software Manager icon in the desktop.
1. Pull down the "Software" menu and select "Install New".
2. When prompted for the host from which to install, choose the local machine and then "Continue".
3. In the "Select Media" menu, pull down the "Media Device" menu. Select "Media Images", then choose "Continue".
4. When prompted for the "Image Directory", enter the directory where you unwound the tar file of the package to be installed and choose "OK".
5. When prompted to select the software to install, the single software package in the directory will by highlighted. You can deselect any of the optional packages that you do not wish to install at this time. Click on "Install".

File	Custom Package	Custom Version	UW Package	UW Pkg. Version
OSR6_Java2_142.VOLS.tar	j2se142	1.4.2Mb	`j2jre142`	1.4.2.13b
`urwfonts`	2.0
`j2sdk142`	1.4.2.13b
`j2plg142`	1.4.2.13b
`javaxcomm`	2.0
`javasoap`	1.2

Important Notes

Documentation

Essential information about this product is contained in the Java 2 Standard Edition,v. 1.4.2_13, for SCO UNIX Operating Systems Release Notes which are distributed with the j2jre142 package and installed in /usr/java2. A copy of the Release Notes is available on this download page.

Be sure to read these notes thoroughly before attempting to use the J2SE 1.4.2. We recommend that you print out or bookmark these notes for later reference.

Licensing

The J2SE 1.4.2 for SCO UNIX is licensed under the same terms as the host SCO operating system upon which it is installed.