Fedora 35 Update: java-17-openjdk-17.0.3.0.7-2.fc35

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-a991bd2201
2022-06-30 02:17:04.004292
--------------------------------------------------------------------------------

Name        : java-17-openjdk
Product     : Fedora 35
Version     : 17.0.3.0.7
Release     : 2.fc35
URL         : http://openjdk.java.net/
Summary     : OpenJDK 17 Runtime Environment
Description :
The OpenJDK 17 runtime environment.

--------------------------------------------------------------------------------
Update Information:

# FIPS Key Exporter  This update for OpenJDK improves the support for when the
system is running in FIPS mode.  It introduces a key exporter which will allow
the export of keys in plain from the NSS Software Token while in FIPS mode.  The
scope will be initially constrained to keys of CKO_SECRET_KEY class, as this is
what we require for TLS 1.3 key-derivation in FIPS mode (coming soon). In the
future, we might extend the exporter functionality to support keys of
CKO_PRIVATE_KEY class.  As with the importer functionality, the exporter can be
disabled by means of the 'com.redhat.fips.plainKeySupport' system property:
-Dcom.redhat.fips.plainKeySupport=false. The default behaviour is enabled.  This
update also fixes a permissions bug which was found with the importer code.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Jun 12 2022 Andrew Hughes <gnu.andrew(a)redhat.com&gt; - 1:17.0.3.0.7-2
- Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that
repository
- Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
- RH2023467: Enable FIPS keys export
- RH2094027: SunEC runtime permission for FIPS
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-a991bd2201' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------