Getting Started

Java^TM 2, Standard Edition 5.0 update 09b
for SCO^Ž UNIX^Ž Operating Systems

This release of Java 2 Standard Edition contains:

the Java 2 Runtime Environment, which allows SCO UNIX end users to run Java applets and applications on SCO UNIX operating systems
the Java 2 Software Development Kit (J2SDK), which enables SCO UNIX OEMs, ISVs, and end users to develop Java applets and applications that conform to the Java 2 Core API
the Java 2 Plugin for the Mozilla browsers released for UnixWare 7.1.4 and OpenServer 6.0.0.

J2SE 5.0 for SCO UNIX is a full implementation of the Sun Microsystems^TM Java 2 Platform - the technology and environment described in the Sun^TM specifications of the Java 2 Platform, Standard Edition, 5.0, update 09b. (The "update 09b" indicates the patch level of the Sun J2SE that J2SE 5.0 for SCO UNIX corresponds to.)

Changes in This Release

J2SE 5.0, update 09b

This web-release of J2SE 5.0, update 09b, contains a fix to avoid a bug on SCO platforms in the parallel garbage collection routines encountered when running JBoss on "server class" systems. This update is a minimum requirment for the SCO MeInc Mobility Server on OpenServer 6.0.0.

J2SE 5.0, update 09

J2SE 5.0, update 09 for SCO UNIX is a significant update to the J2SE 5.0 product. It encompasses Sun's updates 07, 08 and 09 and contains the following fixes or enhancements:

Daylight Savings Time timezone changes that go into effect in 2007.
Additional Root CA certificates have been added to the cacerts file.
A problem with embedded Java JVM initialization within a threaded application has been corrected.
Several security issues have been resolved including the publicly announced issues listed below. In addition, security issues resolved in Sun's preliminary J2SE 5.0, update 10 release currently in development have been incorporated in this SCO product release.

The J2SE 5.0, update 09 release supercedes the J2SE 5.0, update 06 previously released on the SCO Support web site.

Sun Alert ID Description

102760 A buffer overflow vulnerability in processing GIF images in the Java Runtime Environment may allow an untrusted applet to elevate its privileges. (Fix from J2SE 5.0, update 10 released in SCO's J2SE 5.0, update 09 release.)

102732 Two vulnerabilities in the Java Runtime Environment may allow an untrusted applet to access data in other applets.

102731 Two vulnerabilities related to serialization in the Java Runtime Environment may independently allow an untrusted applet or application to elevate its previleges.

102729 Two buffer overflow vulneribilities in the JRE may independently allow an untrusted applet to elevate its previleges. For example, an applet may grant itself permissions to read and write a local file or execute local applications that are accessible to the user running the untrusted applet.

102662 A security vulnerability in the JRE Swing library may allow an untrusted applet to access data in other applets.

102686 The JRE and Java Secure Socket Extension (JSSE) may verify incorrect RSA PKCS #1 v1.5 signatures if the RSA public key exponent is 3. This may allow applets or applications that are signed by forged signing certificates and websites with forged web server certificates to be verified as valid.
For more information see:

http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339

Sun Alert ID	Description
102760	A buffer overflow vulnerability in processing GIF images in the Java Runtime Environment may allow an untrusted applet to elevate its privileges. (Fix from J2SE 5.0, update 10 released in SCO's J2SE 5.0, update 09 release.)
102732	Two vulnerabilities in the Java Runtime Environment may allow an untrusted applet to access data in other applets.
102731	Two vulnerabilities related to serialization in the Java Runtime Environment may independently allow an untrusted applet or application to elevate its previleges.
102729	Two buffer overflow vulneribilities in the JRE may independently allow an untrusted applet to elevate its previleges. For example, an applet may grant itself permissions to read and write a local file or execute local applications that are accessible to the user running the untrusted applet.
102662	A security vulnerability in the JRE Swing library may allow an untrusted applet to access data in other applets.
102686	The JRE and Java Secure Socket Extension (JSSE) may verify incorrect RSA PKCS #1 v1.5 signatures if the RSA public key exponent is 3. This may allow applets or applications that are signed by forged signing certificates and websites with forged web server certificates to be verified as valid. For more information see: http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339

J2SE 5.0, update 06

J2SE 5.0, update 06, was the initial J2SE 5.0 product release on SCO UNIX platforms.
J2SE 5.0 for SCO UNIX is a major new release compared to the previous J2SE 1.4.2 for SCO UNIX.

System Requirements and Supported Platforms

Supported SCO UNIX platforms:

SCO OpenServer^TM Release 6.0.0 operating system
UnixWare^Ž 7.1.4 operating system

J2SE 5.0 for SCO UNIX is not supported on older versions of the supported operating systems, such as SCO OpenServer Release 5.0.x or UnixWare 7 Release 7.1.3 or earlier, nor is it available for older operating systems, such as the SCO UnixWare 2 operating system.

The J2SE 5.0 is identical for all supported platforms, and everything in these release notes applies to all supported platforms.

Pkg/Cmpnt Name	Required Software	Approx. Size	Contains
`j2jre150`	UW 7.1.4	72 MB	Runtime Support: `java`, the Java virtual machine interpreter (JVM); the "client" and "server" dynamic compilers; Java Foundation Classes (JFC) & Swing Package; and basic API libraries: language support, I/O, AWT, networking, utilities, images, media, math, compression, and security. Distributed applications and database access: Remote Method Invocation (RMI); JavaBeans^TM (component object model); JDBC^TM (database access); Internationalization tools; Security tools; Java IDL tools.
`j2sdk150`	j2jre150	41 MB	Development Tools: `appletviewer`, the Java Applet Viewer; `javac`, the Java Compiler; `jdb`, the command-line Java debugger; `javah`, the C Header and Stub File Generator for native methods; `javap`, the Java Class File Disassembler; `javadoc`, the JAVA API Documentation Generator; `jar`, the Java Archive (JAR) tool; and assorted other commands used in Java development; class libraries used in Java development; header files used in native code development. Also Java demo applets and applications; demos of Swing functionality; Java Plugin demos; native method demos.
`j2plg150`	j2jre150	0.5 MB	Java 2 Plugin for Mozilla browser 1.7.x on UnixWare 7.1.4 and OpenServer 6.0.0.

`j2se150`	OSR 6.0.0	116 MB	In additional to the Runtime Support, Development Tools and Java Plugin software in the UnixWare packages above, the OpenServer 6.0.0 product contains the additional Java Communications API (javaxcomm) Apache Axis SOAP Web Services 1.2 & Apache Xerces-J XML Parser 1.4.4 software whose JNI runtime or JAR files must be installed in the J2SE 5.0 product repository.

Note: Where one J2SE 5.0 package requires another J2SE 5.0 package, the version numbers of the packages must be the same. The Java 2 SDK package, version 1.5.0.06 requires the Java 2 Runtime, version 1.5.0.06.

Multiple Java 2 SE Releases

Multiple major versions of J2SE can co-exist on your SCO UNIX platform. The installation is to a version specific directory in /opt.

J2SE 1.3.1 ==> /opt/java2-1.3.1
J2SE 1.4.2 ==> /opt/java2-1.4.2
J2SE 5.0 ==> /opt/java2-1.5.0

Updates to each major version of J2SE install in the same base directory.

The installation of the JRE piece for each of these major point releases will automatically symbolicly link /usr/java and /usr/java2 to point to the "newly" installed JRE directory. System administrators can and should readjust these symbolic links as needed by their specific system and software requirements.

Other software released by SCO for your SCO UNIX platform as well as third party applications that use Java, may require a specifc J2SE major version. That software may either reference the J2SE of interest through:

an environement variable such as JAVA_HOME that points to /usr/java or directly to the installation directory /opt/java2-1.x.x.
an absolute command path, either /usr/java/bin/command or /opt/java2-1.x.x/bin/command.

Caution: Before removing earlier/other major versions of J2SE on your system, be certain that other installed software does not require that version. For example, the Apache-Tomcat product released on UnixWare 7.1.4 and OpenServer 6.0.0 have been configured, tested and certified with J2SE 1.4.2. Removal of that JRE will result in Tomcat failing to start.

Download and Installation

The J2SE 5.0 product is distributed in one of two packaging formats for the different supported SCO UNIX systems.

Print or save a copy of this "Getting Started" page for later reference.
Download a copy of the current J2SE 5.0 update 09b Release Notes (ReleaseNotes.html)and save, also for later reference.

Select and download the packages you wish to install. Note that the packages are available in two formats:

For UnixWare 7.1.4: compressed/uncompressed pkgadd datastream format.

File Package Version

j2jre150.ds.Z j2jre150 1.5.0.09b

j2sdk150.ds j2sdk150 1.5.0.09b

j2plg150.ds j2plg150 1.5.0.09b

File	Package	Version
j2jre150.ds.Z	`j2jre150`	1.5.0.09b
j2sdk150.ds	`j2sdk150`	1.5.0.09b
j2plg150.ds	`j2plg150`	1.5.0.09b

For OpenServer 6.0.0: custom format package

File Custom Package Custom Version UW Package UW Pkg. Version

OSR6_Java2_150.VOLS.tar j2se150 1.5.0.Ib j2jre150 1.5.0.09b

j2sdk150 1.5.0.09b

j2plg150 1.5.0.09b

javaxcomm 2.0

javasoap 1.2

Download an install any prerequisite packages, runtime, maintenance packs, maintenance supplements, support level supplements as required in the System Requirements and Supported Platforms of this document.
As root, installed the J2SE 5.0 packages that you have downloaded.
Change directory into the directory containing the downloaded package datastreams
cd <download-dir>

On UnixWare 7.1.4:
Install the J2SE 5.0 packages in the following order.
If the package datastreams have been downloaded in compressed format:
zcat j2jre150.ds.Z | pkgadd -d - all

pkgadd -d `pwd`/j2sdk150.ds all
pkgadd -d `pwd`/j2plg150.ds all

If the package datastreams have been uncompressed when downloaded with your browser:
pkgadd -d `pwd`/j2jre150.ds all
pkgadd -d `pwd`/j2sdk150.ds all
pkgadd -d `pwd`/j2plg150.ds all

On OpenServer 6.0.0, having downloaded the single custom format file:
Make a subdirectory and unwind the tar file into that subdirectory.
mkdir JAVA150
cd JAVA150; tar -xf ../OSR6_Java2_150.VOLS.tar

Run the Software Manager with the command:
scoadmin software
or
custom

or double-click on the Software Manager icon in the desktop.
1. Pull down the "Software" menu and select "Install New".
2. When prompted for the host from which to install, choose the local machine and then "Continue".
3. In the "Select Media" menu, pull down the "Media Device" menu. Select "Media Images", then choose "Continue".
4. When prompted for the "Image Directory", enter the directory where you unwound the tar file of the package to be installed and choose "OK".
5. When prompted to select the software to install, the single software package in the directory will by highlighted. You can deselect any of the optional packages that you do not wish to install at this time. Click on "Install".

File	Custom Package	Custom Version	UW Package	UW Pkg. Version
OSR6_Java2_150.VOLS.tar	j2se150	1.5.0.Ib	`j2jre150`	1.5.0.09b
`j2sdk150`	1.5.0.09b
`j2plg150`	1.5.0.09b
`javaxcomm`	2.0
`javasoap`	1.2

Important Notes

Documentation

Essential information about this product is contained in the Java 2 Standard Edition 5.0, update 09b for SCO UNIX Operating Systems Release Notes which are distributed with the j2jre150 package on UnixWare 7.1.4 and the j2se150 component on Openserver 6.0.0 and installed in /usr/java2. A copy of the Release Notes is available on this download page.

Be sure to read these notes thoroughly before attempting to use the J2SE 5.0. We recommend that you print out or bookmark these notes for later reference.

Licensing

The J2SE 5.0 for SCO UNIX is licensed under the same terms as the host SCO operating system upon which it is installed.