REDHAT-BUG-1730411: Medium severity openjdk vulnerability

Published Jul 16, 2019

Updated

The Elliptic Curve (EC) cryptography in the Security component of OpenJDK was modernized to use formulas that are more efficient, easier to implement, and offer greater resiliency against side-channel attacks (timing or cache).

For more detailed information, refer to upstream bug:

https://bugs.openjdk.java.net/browse/JDK-8208698

Upstream commit:

http://hg.openjdk.java.net/jdk/jdk/rev/752e57845ad2

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Jul 16, 2019

Data Sourced

via Red Hat·03:55 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1730411?

The severity of REDHAT-BUG-1730411 is considered critical due to potential vulnerabilities associated with elliptic curve cryptography.

How do I fix REDHAT-BUG-1730411?

To fix REDHAT-BUG-1730411, update your OpenJDK to the latest version that incorporates the modernized elliptic curve cryptography.

What vulnerabilities does REDHAT-BUG-1730411 address?

REDHAT-BUG-1730411 addresses vulnerabilities related to inefficiencies in elliptic curve cryptography that could lead to side-channel attacks.

Is REDHAT-BUG-1730411 applicable to all versions of OpenJDK?

REDHAT-BUG-1730411 specifically affects certain versions of OpenJDK, so it's critical to reference the supported versions for your software.

What are the implications of not addressing REDHAT-BUG-1730411?

Failure to address REDHAT-BUG-1730411 may leave systems exposed to potential side-channel attacks, compromising security.