crypto-policiespackage at build-time and run-time
Support has been added for TLS channel binding tokens for Negotiate/Kerberos authentication over HTTPS through
Channel binding tokens are increasingly required as an enhanced form of security which can mitigate certain kinds of socially engineered, man in the middle (MITM) attacks. They work by communicating from a client to a server the client's understanding of the binding between connection security (as represented by a TLS server cert) and higher level authentication credentials (such as a username and password). The server can then detect if the client has been fooled by a MITM and shutdown the session/connection.
The feature is controlled through a new system property
jdk.https.negotiate.cbt which is described fully at the following
GZIPOutputStream.finish() methods have been modified to close out the associated default JDK compressor before propagating a
Throwable up the stack.
ZIPOutputStream.closeEntry() method has been modified to close out the associated default JDK compressor before propagating an
IOException, not of type
ZipException, up the stack.
java.util.Vector is updated to correctly report
ClassNotFoundException that occurs during deserialization usingjava.io.ObjectInputStream.GetField.get(name, object)
when the class of an element of the Vector is not found. Without this fix, aStreamCorruptedException` is thrown that does not provide information about the missing class.
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2022-d26586b419
Please login to add feedback.