Oracle to ship 40 security fixes for Java SE