-
Story
-
Resolution: Done-Errata
-
Undefined
-
rhel-7.9.z
-
None
-
java-1.8.0-openjdk-1.8.0.392.b08-1.el7_9
-
rhel-sst-java
-
26
-
None
-
False
-
-
None
-
None
-
None
Red Hat builds of OpenJDK ship with some patches to remove the implementation of Elliptic Curves, for example:
https://github.com/icedtea-git/icedtea/blob/12.0/patches/pr3823.patch
https://github.com/icedtea-git/icedtea/blob/6.0/patches/gh001-4curve.patch
https://github.com/icedtea-git/icedtea/blob/3.0/patches/pr3822-4curve.patch
And similar.
These patched were added for historical reasons:
https://fedoraproject.org/wiki/Legal:ECC
But upon assessment, the code as implemented in OpenJDK now is consistently licensed under GPLv2+CE and unencumbered, and we believe that license is actually relevant in this context and can remove the patches.
- clones
-
RHEL-12910 Reinstate original ECCs code in Red Hat builds of OpenJDK to match current upstream implementation [rhel-7.9.z, openjdk-11]
- Closed
- links to
-
RHSA-2023:122047 java-1.8.0-openjdk security and bug fix update