Fedora 35 Update: java-17-openjdk-17.0.3.0.7-2.fc35
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-a991bd2201
2022-06-30 02:17:04.004292
--------------------------------------------------------------------------------
Name : java-17-openjdk
Product : Fedora 35
Version : 17.0.3.0.7
Release : 2.fc35
URL : http://openjdk.java.net/
Summary : OpenJDK 17 Runtime Environment
Description :
The OpenJDK 17 runtime environment.
--------------------------------------------------------------------------------
Update Information:
# FIPS Key Exporter This update for OpenJDK improves the support for when the
system is running in FIPS mode. It introduces a key exporter which will allow
the export of keys in plain from the NSS Software Token while in FIPS mode. The
scope will be initially constrained to keys of CKO_SECRET_KEY class, as this is
what we require for TLS 1.3 key-derivation in FIPS mode (coming soon). In the
future, we might extend the exporter functionality to support keys of
CKO_PRIVATE_KEY class. As with the importer functionality, the exporter can be
disabled by means of the 'com.redhat.fips.plainKeySupport' system property:
-Dcom.redhat.fips.plainKeySupport=false. The default behaviour is enabled. This
update also fixes a permissions bug which was found with the importer code.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 12 2022 Andrew Hughes <gnu.andrew(a)redhat.com> - 1:17.0.3.0.7-2
- Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that
repository
- Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
- RH2023467: Enable FIPS keys export
- RH2094027: SunEC runtime permission for FIPS
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-a991bd2201' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------