stable
FEDORA-2022-80afe2304a created by ahughes 4 months ago for Fedora 35

New in release OpenJDK 8u342 (2022-07-19)

Security Fixes

  • JDK-8272243: Improve DER parsing
  • JDK-8272249: Better properties of loaded Properties
  • JDK-8277608: Address IP Addressing
  • JDK-8281859, CVE-2022-21540: Improve class compilation
  • JDK-8281866, CVE-2022-21541: Enhance MethodHandle invocations
  • JDK-8283190: Improve MIDI processing
  • JDK-8284370: Improve zlib usage
  • JDK-8285407, CVE-2022-34169: Improve Xalan supports

FIPS Changes

  • RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  • RH2051605: Detect NSS at Runtime for FIPS detection
  • RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  • RH2090378: Revert to disabling system security properties and FIPS mode support together
  • Depend on crypto-policies package at build-time and run-time

Other Changes

  • Add javaver- and origin-specific javadoc and javadoczip alternatives (thanks to FeRD (Frank Dana) ferdnyc@gmail.com)

JDK-8215293: Customizing PKCS12 keystore Generation

New system and security properties have been added to enable users to customize the generation of PKCS #12 keystores. This includes algorithms and parameters for key protection, certificate protection, and MacData. The detailed explanation and possible values for these properties can be found in the "PKCS12 KeyStore properties" section of the java.security file.

Also, support for the following SHA-2 based HmacPBE algorithms has been added to the SunJCE provider:

  • HmacPBESHA224
  • HmacPBESHA256
  • HmacPBESHA384
  • HmacPBESHA512
  • HmacPBESHA512/224
  • HmacPBESHA512/256

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2022-80afe2304a

This update has been submitted for testing by ahughes.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has obsoleted java-1.8.0-openjdk-1.8.0.332.b09-2.fc35, and has inherited its bugs and notes.

4 months ago

ahughes edited this update.

4 months ago

This update has been pushed to testing.

4 months ago

This update has been submitted for stable by bodhi.

3 months ago

This update has been pushed to stable.

3 months ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
0
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
4 months ago
in testing
4 months ago
in stable
3 months ago
modified
4 months ago
BZ#2036462 rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance()
0
0

Automated Test Results