-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-a991bd2201 2022-06-30 02:17:04.004292 --------------------------------------------------------------------------------
Name : java-17-openjdk Product : Fedora 35 Version : 17.0.3.0.7 Release : 2.fc35 URL : http://openjdk.java.net/ Summary : OpenJDK 17 Runtime Environment Description : The OpenJDK 17 runtime environment.
-------------------------------------------------------------------------------- Update Information:
# FIPS Key Exporter This update for OpenJDK improves the support for when the system is running in FIPS mode. It introduces a key exporter which will allow the export of keys in plain from the NSS Software Token while in FIPS mode. The scope will be initially constrained to keys of CKO_SECRET_KEY class, as this is what we require for TLS 1.3 key-derivation in FIPS mode (coming soon). In the future, we might extend the exporter functionality to support keys of CKO_PRIVATE_KEY class. As with the importer functionality, the exporter can be disabled by means of the 'com.redhat.fips.plainKeySupport' system property: -Dcom.redhat.fips.plainKeySupport=false. The default behaviour is enabled. This update also fixes a permissions bug which was found with the importer code. -------------------------------------------------------------------------------- ChangeLog:
* Sun Jun 12 2022 Andrew Hughes gnu.andrew@redhat.com - 1:17.0.3.0.7-2 - Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch - RH2023467: Enable FIPS keys export - RH2094027: SunEC runtime permission for FIPS --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-a991bd2201' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org