Sunday Jan 13, 2013

Oracle JDK 7u11 released

Oracle has released Security Alert CVE-2013-0422 to address the flaw in Java software integrated with web browsers. More information about this Security Alert is available on This is a blog that discusses when the bug was reported and actions that Java users need to take to secure their systems.

Java SE 7 Update 11 is available from the following download sites:

Friday Dec 14, 2012

Oracle JDK 7u10 released with new security features

A few days ago, we released JRE and JDK 7 update 10. This release adds support for the following new platforms:

  • Windows 8 on x86-64. Note that Modern UI (aka Metro) mode is not supported.
  • Internet Explorer 10 on Windows 8.
  • Mac OS X 10.8 (Mountain Lion)

This release also introduces new features that provide enhanced security for Java applet and webstart applications, specifically:

  • The Java runtime tracks if it is updated to the latest security baseline. If you try to execute an unsigned applet with an outdated version of Java, a warning dialog will prompt you to update before running the applet.
  • The Java runtime includes a hardcoded best before date. It is assumed that a new version will be released before this date. If the client has not been able to check for an update prior to this date, the Java runtime will assume that it is insecure and start warning the user prior to executing any applets.
  • The Java control panel now includes an option to set the desired security level on a low-medium-high-very high scale, as well as an option to disable Java applets and webstart entirely. This level controls things such as if the Java runtime is allowed to execute unsigned code, and if so what type of warning will be displayed to the user.

More details on the security settings can be found in the documentation. See below for a sample screenshot.

Security Dialog Image

The new update of the JRE and the JDK are available via OTN. To learn more about the release please visit the release notes.

Tuesday Sep 25, 2012

Oracle releases new Java Embedded products

With less than one week to go to JavaOne 2012, we've spiced things up a little by releasing not one but two net new embedded Java products. This is an important step towards realizing the vision of Java as the standard platform for the Internet of Things that I outlined in a recent blog post. The two new products are:

  • Java ME Embedded 3.2. Based on same code as the widely deployed Oracle Java Wireless Client for feature phones, this new product provides a Java ME implementation optimized for very small microcontroller-based devices and adds - among other things - a new Device Access API that enables interaction with peripherals common in edge devices such as various types of sensors. In addition to the new Java ME Embedded platform, we have also released an update of the Java ME SDK which adds support for the development of small embedded devices.
  • Java Embedded Suite 7.0. This is an integrated middleware stack for embedded devices, incorporating Java SE Embedded and versions of JavaDB, GlassFish and a Web Services stack optimized for remote operation and small footprint.

A typical Internet of Things (or M2M) infrastructure contains three types of compute nodes: The edge device which is typically a sensor or control point of some kind. These devices can be connected directly to a backend through a mobile network if they are installed in - for example - a remote vending machine; or, they can be part of a local short-range network and be connected to the backend through a more powerful gateway device. A gateway is the second type of compute node and acts as an aggregator and control point for a local network. A good example of this could be a generalized home Internet access point, or home gateway. Gateways are mostly using normal wall power and are used for multiple applications, deployed by multiple service providers. Finally, the last type of compute node is the normal enterprise or cloud backend. Java ME Embedded and Java Embedded Suite are perfect base software stacks for the edge devices and the gateway respectively, providing the Java promise of a platform independent runtime and a complete set of libraries as well as allowing a programmer to focus on the business logic rather than plumbing.

We are very thrilled with these new releases that open up exciting opportunities for Java developers to extend services and enterprise applications in ways that will make organizations more efficient and touch our daily lives. To find out more, come to the JavaOne conference (for technical content) and to the Java Embedded @ JavaOne subconference (for business content). There will be plenty of cool demos showing complete end-to-end applications, provided by Oracle and our partners, as well as keynotes and numerous sessions where you can learn more about the technology and business opportunities.

Thursday Sep 13, 2012

Java 7 Adoption at 79%

According to a recent blog post from the cloud hosting company Jelastic, Java 7 adoption on their platform is now at 79%. While this is a single data point and should not be read too broadly, it does match other indicators we have that Java 7 is picking up, such as uptake among Oracle middleware customers, download statistics and online activity. The spike in adoption in April coincided with the release of JDK 7 Update 4. This is in line with our expectations since that release added Mac OS X support as well as moving to Java 7 as the default download for end-users; two events that marked the maturity of Java 7 to the community.

Since the original release of Java 7, Oracle has shipped 7 update releases, added ports to Mac OSX and Linux/ARM and expanded JavaFX to all common desktop platforms.

Thursday Aug 30, 2012

Oracle releases Java SE 7 Update 7, and Java SE 6 Update 35

This morning, Oracle released updates to JDK 6 and 7. For more information on these releases see:

Oracle recommends that users apply these updates as soon as possible. Users of Oracle JRE 6 and 7 for Windows (32-bit) and the recently released JRE 7 for Mac OSX (64-bit) will be updated automatically. For more information see, this blog entry.

Monday Aug 20, 2012

Introducing Java Embedded @ JavaOne

Analysts predict that the next revolution in the industry will be the Internet of Things. Speaking in hyperbole, the message is that we first had the Internet of Computers (90s), then the Internet of People (2000s) and that the next Big Thing (tm) is when all the gazillion devices we have around us start becoming connected. This is labeled the Internet of Things. Catchy phrase, isn't it?

So what are all these "things"? Well, if you look around, you will probably see a dozen of them from where you read this. Your car, an elevator, your washing machine, a pretty screen on your home AC control unit that shows scary statistics on how much power you're consuming in the heat of summer. And so on. A common description of this entire segment is "embedded", and it is an entire industry in and of itself. This industry is in a state similar to the PC market in the early 90s. There is a plethora of operating systems, toolchains, frameworks and standards, and a very fragmented hardware market. Programming these devices require specialized skills and is arguably quite a bit more complicated than writing a web or phone app.

In my completely unbiased opinion (ok, flame bait) it is clear that Java could be highly beneficial for this market. It has a large pool of skilled developers, a very mature runtime and development tools, and a well established ecosystem of commercial vendors and open source communities. Java is fast to work with, greatly simplifies portability of code across devices and - very important - adapts well to a rapidly evolving underlying platform. So you are moving from 16 (not a joke) to 32-bit? Just get a 32-bit JVM and you're set. Your embedded chips are becoming multi-core? Java and the JVM have supported multi-core for an eternity. You want to share that nifty communication protocol code you wrote between your backend and your little edge device? No problem. See?

For those interested in learning how to program embedded devices in Java, JavaOne has long had dedicated tracks and sessions for embedded and that remains true this year. However, this year we also wanted to reach out to executives and decision makers and show how Java can enable your business to benefit from the Internet of Things revolution. For this purpose we hold a new sub-conference called Java Embedded @ JavaOne.

If you are a business leader, register now. Then come and find out from us and our partners how Java enables tying embedded systems to your enterprise backend, and how Java can help your business grow with the Internet of Things while reusing existing investments and retaining good TCO on new investments.

If you are a developer, tell your manager that they should come and need a technical advisor (you) who can attend the main JavaOne event. And while you're there, go to a few embedded sessions to learn something new, such as how to make LEDs blink, how to properly secure an embedded device to avoid privacy issues or how to make it talk to your Java EE service in the cloud. Then go home and program your Java-enabled coffee machine to make you a perfect cup of Java :-)

Tuesday Aug 14, 2012

Oracle releases JDK for Linux ARM, JRE for Mac OS X

Earlier today, we announced (among other things) the availability of JDK 7 Update 6. This release contains an update to the Mac OS X port, as well as the addition of a new JDK port to Linux ARM.

The Java 7 port to Mac OS X has been long in the making. We have been working on it in OpenJDK with Apple since November 2010, and it has been quite a lot of work both in the JDK/JRE and in OS X to get to this point. A lot of work has been done behind the scenes on seemingly trivial but time-consuming tasks such as extending the build & test infrastructure and figuring out how to decouple the Java and OS release cycles. Anyway; with the 7u6 release we are finally completing the feature set by adding a desktop JRE and making it available for download on and (in a week or so) on

With JDK 7u6 we are also adding a general-purpose port of the JDK (but not a desktop JRE) to Linux ARM, and making it available under the same licensing terms as Oracle Java for other platforms. This JDK release is aimed at the emerging ARM server market, and for the community working on development boards such as the BeagleBoard, PandaBoard and the Raspberry Pi. This port provides 32-bit binary for ARMv6 and v7, with full support for Swing/AWT, both client (C1) and server (C2) compilers and runs on most Linux distributions. One caveat is that the current binary is softfloat ABI only, so it won't work with (for example) the Raspbian distribution which uses the hardfloat ABI. We are planning to add hardfloat support in an upcoming JDK release, as well as support for JavaFX on ARM.

I anticipate quite a few questions about the ARM port, so here are a few FAQs to start with:

  • What is the relation between Java SE Embedded and the JDK for ARM? Java SE Embedded is a Java SE compliant runtime optimized for small footprint devices, available for multiple architectures including ARM v5/6/7, x86 and PPC. It is a product that Oracle licenses commercially for embedded use. The JDK is a generic Java runtime and development kit, intended for developers and server-side applications and is available on architectures such as x86, SPARC and - now - ARM. It is free for general purpose use, with commercial support available under the Java SE Support program.
  • Is the ARM JDK free (gratis) or does it require a commercial license? Like all general-purpose JDK and JRE binaries, the ARM JDK is free for development and production use on general-purpose hardware, and can be redistributed for free with applications targeting a general-purpose computer. See the end-user license for the exact license grants & restrictions. To take a couple of examples, an ARM server deployed in your datacenter running Tomcat or Glassfish is general-purpose, as is a Raspberry Pi board when you use it like a PC. An industrial controller or a kiosk appliance is not general purpose, and both would require a commercial license.
  • Is the Oracle JDK port to ARM available in OpenJDK? No, and we are not planning on open sourcing it at this point.
  • I own a Raspberry Pi/BeagleBoard/PandaBoard. How do I get Java running on it? Make sure that you use a Linux distribution that uses the softfloat ABI, or a hardfloat ABI that has multi-arch support but not a distribution that only supports hardfloat (such as Raspbian), and then download and install the Oracle JDK on it.
  • Why is Oracle investing in an ARM port and then giving it away for free? We have a super-secret agenda. The idea is to enable Java developers so that Java can continue to thrive, and maybe sell some middleware on ARM servers down the line.
  • Is graphics fully supported? What about sound? Yes, the JDK binary is headful which means that Swing/AWT and sounds are both supported. Note that sound is not available in our headless Java SE Embedded binaries, which is the most likely reason for a small set of reports on sound issues found across the web. Swing/AWT requires X11R6 to work, framebuffer is not supported. JavaFX is not yet available on Linux ARM, but is in our roadmap.
  • Does the Linux ARM JDK have full feature parity with the JDK on other platforms? Most of the JDK features are supported, but there are some that are not available. Some examples of missing features include the G1 GC, tiered compilation and plugin/webstart. See the release notes for more detail. Some of these features will be added in future releases.
  • What is this softfloat vs hardfloat thing? When will the Oracle JDK support hardfloat? Some ARM chips have hardware support for floating point (hardfloat), and some do floating point through software (softfloat). An operating system running on an ARM chip that supports hardware floating point can use the floating point registers for parameter passing during function calls, which improves performance. This parameter passing is a contract between the OS, libraries and applications (such as the JVM) called the ABI or Application Binary Interface. In the simple case, an OS exposing the softfloat ABI requires all libraries and applications to be compiled against softfloat, and an OS exposing hardfloat requires libraries and applications to be compiled against hardfloat. There is a special case where a hardfloat OS can provide a compatibility layer and therefore enable softfloat applications to work. Until recently, almost all Linux distributions were softfloat. Lately, Linux distributions have aggressively moved to hardfloat. Some - I believe Ubuntu 12.04 is a good example - also provides softfloat compatibility. Raspbian on the other hand is hardfloat only. The initial release of the Oracle JDK for ARM uses the softfloat ABI and so works on softfloat distributions, or hardfloat with softfloat compatibility, but not on hardfloat. This is just a matter of timing - we will provide a hardfloat JDK at some point in the future. It will likely be done iteratively, so we may for instance deliver ARMv7 first and ARMv6 later, and the initial release may be headless so no Swing/AWT. We will produce public early access builds as soon as we are able and make them available on We don't have any dates to share yet, but will hopefully be able to provide a roadmap at JavaOne 2012.
  • Now that you have a public ARM port, will you support other OSes like iOS? Linux is a simple port, iOS is not. We have done some prototyping, but at this time it's not something we have on our roadmap. One of many open questions is what UI to use. JavaFX is an option, or a hybrid Java+Web combination like the one used for ADF mobile. It's really a matter of whether a solution would get sufficiently broad adoption to be worth the investment. If you want something NOW, head over to OpenJDK and start hacking! :-)
  • If I'm not an Oracle customer, how do I report an issue on the ARM JDK? Use the Java developer forums on OTN for general questions, and for bug reports.
  • Is Jazelle hardware byte-code execution supported? No. Jazelle is not needed when a good JIT is present, and you can afford the memory and power budget for it.

Wednesday Aug 08, 2012

Java 6 End of Public Updates extended to February 2013

Earlier this year I announced that the EOL for Oracle JDK 6 had been extended from July 2012 to November 2012. JDK 6 was the default JDK for over 5 years, and so it seems fair that it have a longer publicly available support time-frame than past major releases.

After further consultation and consideration, the Oracle JDK 6 End of Public Updates will be extended through February, 2013. This means that the last publicly available release of Oracle JDK 6 is to be released in February, 2013. After the End of Public Updates for JDK 6, if you have a valid support contract for an Oracle product that requires JDK 6, or an Oracle Java SE Support contract, there will still be additional support versions of JDK 6 available from My Oracle Support. Previously available versions of JDK 6 will remain available to the public through the Java Archive for debugging and testing purposes but Oracle no longer recommends using those in production.

It's important to highlight that, as we establish a steady two year cadence for major releases, End of Public Update events for major versions will become more frequent. As a reminder, moving forward, Oracle will stop providing public updates of a major JDK version once all of the following criteria have been met:

  • Three years after the GA of a major release
  • One year after the GA of a subsequent major release
  • Six months after a subsequent major release has been established as the default JRE for end-user desktops on

For more information see the FAQ on OTN.

Monday May 21, 2012

Java 7 adoption at 23%

Quotes from a recent study by ZeroTurnaround:

"Java 7 has been out for less than a year, and at 23% adoption we were slightly surprised at the speed of uptake."

"Java 6 is the overwhelming version of Java, used by 88% of respondents. But more interesting and exciting is the fact that 23% of respondents are already using Java SE 7. This is amazing penetration, considering it came out less than half a year before the time of this survey. This gives hope that as Java SE 8, 9 and 10 come out in the next 6 years or so, a lot of engineers will be able to benefit from the changes quickly."

Refer to the study for more detail (registration required, quotes used with permission). This data matches other indicators, such as the 18% adoption rate posted by Jelastic a few months ago, which goes on to say:

"This growth is especially impressive considering that Java 6 is currently the default option in Jelastic, so users who turn to Java 7 make this selection explicitly."

Wednesday May 02, 2012

Moving to Java 7 as default

Update: The issue reported in JRE 7 related to JAR file association on certain Windows configurations has been fixed and updated binaries posted to

Back in February, I wrote a post on this blog stating that the End Of Life (EOL) of public support and public releases for JDK 6 was extended to November 2012, to allow for some more time for the transition to JDK 7. As part of the updated EOL policy, EOL for public support and fixes for Java SE will typically occur no earlier than six months after a subsequent major release has been established as the default JRE.

With the release of Java SE 7 Update 4, the Java SE 7 runtime is now available on as the default JRE. We can now slowly begin the process of automatically upgrading Microsoft Windows Java users to the latest version of Java SE 7 through the auto update function. If you don't desire to be automatically upgraded to Java SE 7 just yet, you can learn more about your options in the FAQ.

In terms of major new features, beside Mac OS X support, Java SE 7u4 includes the eagerly anticipated next-generation Garbage First (G1) garbage collection algorithm, as well as numerous performance enhancements to the JVM. It's very mature and stable, has been tested with large parts of our middleware and applications stacks and - as a result - is fully supported and recommended for use with Oracle Fusion Middleware.

This is another Java SE 7 update release that has been developed from beginning to end within the JDK 7 Updates Project in the OpenJDK community. As the vast majority of Oracle’s maintenance contributions in the OpenJDK community is for Java SE 7, users of the previous release, OpenJDK 6, should consider upgrading to OpenJDK 7, or - of course - to Oracle JDK 7, depending on their requirements. In line with no longer posting updates of Java SE 6 after November 2012 to Oracle’s public download sites, we don’t have plans to contribute further changes to the OpenJDK 6 Project after November 2012.

Thursday Apr 26, 2012

Oracle JDK and JavaFX SDK now GA on Mac OS X

Oracle JDK 7 and the JavaFX 2.1 SDK are now available for Mac OS X. This release is a major milestone in our effort to bring Oracle Java to Mac. From this point on, every release of Oracle JDK 7 and JavaFX 2.1 (and later) will be available on Mac at the same time as for Linux, Windows and Solaris.

Where do I download the JDK and JavaFX for OS X?
From The JDK download also contains the Java FX SDK.

Exactly what does this release contain?
A fully compatible implementation of Java SE 7, as well as most JDK development tools and the full JavaFX 2.1 SDK. Some of the serviceability and debugging tools and deployment technologies such as the Java Plugin and Web Start are not yet available, and will be added in subsequent releases. See the JDK release notes and the JavaFX release notes for details.

Does Oracle support NetBeans for use with JDK 7 on Mac?
Yes! NetBeans 7.1.2 was released simultaneously with JDK 7 Update 4, with full support for Oracle JDK on Mac. See the announcement here, and download it here.

Are there any known issues with this release?
Mac OS X is major new platform for us; the first new platform added in a very long time. It should be considered a "1.0" release and there are a number of known issues. Consult the release notes (JDK, JavaFX) for details.

What do I do if I believe I have found a new issue?
Consult the release notes first to ensure that it is not a known issue. You can ask for help to verify and troubleshoot on the appropriate mailing list or web forum, and then file a report in our bug system.

Is the source code to the OS X port available?
Yes! All code for the JDK can be found in the OpenJDK community in the JDK 7 Updates project. JavaFX is partially open sourced in the OpenJFX project; Oracle is working towards open sourcing the remaining parts.

What Apple hardware and what versions of OS X are supported?
Oracle's JDK and JavaFX release supports OS X Lion on any 64-bit capable Intel-based Mac. Specifically, our implementation is 64-bit only so it requires a 64-bit operating system.

Can I use the Oracle JDK on older OS X versions?
Probably not. The underlying issue here is that the Oracle JDK requires certain APIs that Apple introduced in Lion. The functionality introduced in these new APIs did to some extent exist in older OS X versions but were not official APIs.

What if I want a 32-bit JVM, or support for older PPC-based Macs?
There are community efforts based on OpenJDK to build JDK 7 for other configurations, easily found using your favorite search engine. We applaud these efforts! :-)

Can I get commercial support for the Oracle JDK and JavaFX on Mac OS X?
These are considered standard Oracle releases and are therefore covered under the Java SE Support program. Note that support on Mac is for development only; e.g. we don't expect your Mac to be running a business critical server-side application...

What can you say about the roadmap?
Future release of the Oracle JDK and JavaFX on Mac will follow the normal JDK release train with 4-6 releases every year. The next major milestone is JDK 7 Update 6 where we plan to add support for Plugin and Web Start. Early access builds are available here. JDK 8 will of course also support Mac OS X.

Thursday Feb 23, 2012

Java at Embedded World 2012

If you are interested in the latest developments in the embedded-industry and want to make valuable business contacts, then visit Embedded World. Oracle will be showcasing the latest embedded Java technologies, along with more than 800 exhibitors from Germany and abroad who come to Nuremberg to present their products and services. Some statistics:

  • Approximately 20,000 attendees
  • 800 exhibitors from 32 countries
  • 18,350 visitors from 66 countries
  • 1,095 conference participants from 37 countries
  • 204 journalists from 17 countries

Our exhibit stand (stand 313, hall 5) will have 4 workstations with which we will be demoing Java Embedded on partner devices. Partners include: Inductive Automation, Marvell, Mobile Integration Workshop, Pactron, Revolution Robotics and Si14.

Presentations by Oracle employees:

Wednesday Feb 15, 2012

Updated Java 6 EOL date

The Java SE Support Roadmap reflects an updated timeline for the EOL of public support and public releases for JDK 6. The EOL date has been extended from July 2012 to November 2012, to allow some more time for the transition to JDK 7. We have also updated the EOL policy to clarify our intent for this, and future major releases. EOL for public support and fixes for Java SE will typically occur no earlier than:

  • Three years after the GA of a major release
  • One year after the GA of a subsequent major release
  • Six months after a subsequent major release has been established as the default JRE

This policy has been consistent through the history of Java. The JRE is free software, and as is the case with most free software, users are encouraged to adopt the latest stable version. For those who need longer support lifetimes, Oracle offers Java SE Support

Tuesday Dec 13, 2011

Java SE Embedded 7u2 Released

The Java SE Embedded team continues to follow the mainline JDK and has shipped their 7u2 and 6u30 releases. These releases include new ports to Linux on embedded PPC devices, and support for the server (C2) compiler on ARM. The latter improves Java performance on ARM systems by approximately 20-40%. You can find the downloads and release notes (7u2, 6u30) on the Oracle OTN web site.

Oracle's longer term strategy for Java on Embedded devices - as shared at JavaOne 2011 - is to converge the Java ME/CDC and Java SE Embedded platforms into one and use Project Jigsaw to produce a base module based on JDK 8 that requires no more than approximately 10 MB ROM. We also intend to port JavaFX to Linux on ARM for a coherent client story ranging from medium sized embedded devices to normal laptops and desktops.

Sunday Dec 11, 2011

JRockit Mission Control 4.1 released

JRockit Mission Control 4.1 is now available for download. It includes HotSpot support, improved Solaris support, DTrace integration, a Mac OSX port, support for Oracle Coherence and a range of new cool features. More details in Markus Eisele's blog post.

This will likely be the last large feature release of JRockit Mission Control. Moving forward, we are focusing on support for JDK 7 and the converged HotSpot/JRockit JVM. The product will be renamed Java Mission Control as of the 5.0 release.


Henrik Stahl is VP of Product Management in the Java Platform Group at Oracle, and is responsible for product strategy for Java ME and SE.


  • Oracle
« March 2015