Error Message

There are many scans that can alert to vulnerabilities in a Java / JRE version and a patch would be required to upgrade the VOM application to the latest available Java version from Oracle.

Java / JRE is embedded within the CCS application and the installer for Java updater updates a standalone installation.

Supported OS:These versions of the JRE list for Unix are supported on:

• Oracle Solaris 10 Update 9 or later OS.
• Red Hat Enterprise Linux 5.5+, 6.x+ 
• Suse Linux Enterprise Server 10 SP2, 11.x

Download the latest JRE and cryptographic jars from the Oracle JRE download site:

https://www.oracle.com/technetwork/java/javase/downloads/index.html

To download JRE:

Solaris: - jre-7u-solaris-sparc.tar.gz (32-bit) - jre-7u-solaris-sparcv9.tar.gz (64-bit)

As of the date of writing the version was update 9.

https://www.oracle.com/technetwork/java/javase/downloads/jdk7u9-downloads-1859576.html

Oracle has documentation available on a per release instance for example:

https://docs.oracle.com/javase/7/docs/webnotes/install/solaris/solaris-jre.html

Linux: - jre-7u-linux-x64.tar.gz

As of the date of writing the version was update 9.

https://www.oracle.com/technetwork/java/javase/downloads/jdk7u9-downloads-1859576.html

Oracle has documentation available on a per release instance for example:

docs.oracle.com/javase/7/docs/webnotes/install/linux/linux-jre.html

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files

 --------------UnlimitedJCEPolicyJDK7.zip Installation:------------

1. The following commands can be performed in any order.

• gzip -dc jre-7u-solaris-sparc.tar.gz | tar xf 
• gzip -dc jre-7u-solaris-sparcv9.tar.gz | tar xf
• tar zxvf jre-7u-linux-x64.tar.gz

2. Rename the extracted directory "jre1.7." to jre1.7. jre

3. Update the cryptographic jars

• Unzip UnlimitedJCEPolicyJDK7.zip
• This contains two jars: - local_policy.jar and US_export_policy.jar
• Copy the above two jars from UnlimitedJCEPolicy/ to jre/lib/security/

4. Backup the current jre folder /opt/VRTSsfmcs/esmweb/jre

5. Copy the new jre to /opt/VRTSsfmcs/esmweb/

6. Restart the VOM webserver: /opt/VRTSsfmcs/bin/vomsc --restart web

Note: As an update the newest version should always be accessible under  https://www.oracle.com/technetwork/java/javase/downloads/index.html

Applies To

Solaris 9 / 10 Server, Red Hat Enterprise Linux 5.5+, 6.x+ and Suse Linux Enterprise Server 10 SP2, 11.x hosting the VOM Management Server.

Java / JRE from Oracle

 VOM 4.1x, 5.0