Product

Recommendation

Insight Manager XE

Insight Manager XE uses the Microsoft Java Runtime Environment integrated into Microsoft Internet Explorer. HP recommends that Insight Manager XE users upgrade to Insight Manager 7 SP1 that will be available for download in the first half of May at http://www.compaq.com/manage 

Insight Manager 7 SP1 leverages version 1.3.1_02 of the Sun Java Runtime Environment that addresses the vulnerabilities described above. Prior to the release of Insight Manager 7 SP1, HP recommends that users exercise care when browsing to sites outside of the internal network using a browser with a vulnerable version of the Microsoft Java Runtime Environment. 

While it is possible to update the browser to the version of the Java Runtime Environment recommended by Microsoft, this version has not been tested with Insight Manager XE and HP cannot guarantee that Insight Manager XE will function properly.

Insight Manager 7

Insight Manager 7 uses the Sun Java Runtime Environment version 1.3.1 in place of the Microsoft Java Runtime Environment. HP is in the process of incorporating version 1.3.1_02 of the runtime environment, which fixes the aforementioned vulnerability, into Insight Manager 7 Service Pack 1. 

Insight Manager 7 SP1 will be available at the beginning of May. Users may not use version 1.3.1_02 of the plug-in with the current version of Insight Manager 7 as newer versions of the Sun Java Runtime Environment are not backwards compatible and the Insight Manager 7 may not function properly if client and server side runtime environments are not of the same version. 

HP recommends that current Insight Manager 7 users close Microsoft Internet Explorer prior to browsing to untrusted sites outside of the corporate firewall. This will ensure that the Java plug-in is closed prior to browsing to sites on the public Internet. With Insight Manager 7 SP1, the requirement to close the browser prior to visiting public sites will be removed.

Management Agents

Update to the version of the Java Runtime Environment that Microsoft Recommends. This information may be found at http://www.microsoft.com/java/vm/dl_vm40.htm

Remote Insight Lights-Out Edition / Integrated Lights-Out on ProLiant DL360 G2

Update to the Java(TM) 2 Runtime Environment, Standard Edition, version 1.3.1_02 http://java.sun.com/j2se/1.3/download.html To download this software simply click on the hyperlink.

HP Tru64 UNIX 

V4.0f	SDK and JRE 1.1.7B-2
V4.0g	SDK and JRE 1.1.7B-2
V5.0a	SDK and JRE 1.1.7B-6
V5.1	SDK and JRE 1.1.8-6 (default ) and 1.2.2-6
V5.1a	SDK and JRE 1.1.8-10 (default includes proxy fix) and 1.2.2-8

HP Tru64 UNIX V4.0f - update to Java 1.1.7B-10 
HP Tru64 UNIX V4.0g - update to Java 1.1.8-14 (includes proxy fix) 
HP Tru64 UNIX V5.0a update default to Java 1.1.8-14 and update to Java 1.3.1-3 (includes fixes) 
HP Tru64 UNIX V5.1 - update default to 1.1.8-14 (includes fixes) and update Java 1.2.2-8 to Java 1.3.1-3 (includes fixes) 
HP Tru64 UNIX V5.1a - update default to 1.1.8-14 (includes fixes) and update Java 1.2.2-8 to Java 1.3.1-3 (includes fixes) 
HP Tru64 UNIX 5.0 and higher include some Java-based tools that depend on the Java environment default version that ships with the operating system and is installed in /usr/bin. If changing the default system Java environment version to any release after Java 1.1.8, some operating system tools, such as the SysMan Station, the SysMan Station authentication daemon, and the Logical Storage Manager (LSM) Storage Administrator, will not work correctly. 
If problems are experienced maintaining the default installation for HP Tru64 V5.0 or later, please contact normal HP Tru64 support channels for assistance.

HP OpenVMS 

V7.2 V7.2-1 V7.2-1h1, V7.2-1h2, V7.2-2	SDK & JRE 1.1.6-2
V7.3	SDK & JRE 1.1.8-5

The following table shows Java versions that are available at http://www.compaq.com/java/alpha and indicates if the version includes the fix: 

HP OpenVMS - Java 1.3.0-2 (includes proxy fix only) 

Update to : Java 1.3.1-3 (includes fixes)