security-libs/javax.crypto - Provider default key size is updated - This change updates the JDK providers to use 2048 bits as the default key size for DSA instead of 1024 bits when applications have not explicitly initialized the and objects with a key size.This change will affect JSSE connections as well as applications built on JCE. security-libs/javax.crypto - RSA public key validation - In 9.0.4, the RSA implementation in the SunRsaSign provider will reject any RSA public key that has an exponent that is not in the valid range as defined by PKCS#1 version 2.2.If the property is not set, the type checking is only performed against a set of class names of the IDL interface types corresponding to the built-in IDL stub classes. This is an 'opt in' feature and is not enabled by default.

other-libs/corba - Add additional IDL stub type checks to _to_object method - Applications that either explicitly or implicitly call .string_to_object, and wish to ensure the integrity of the IDL stub type involved in the ORB::string_to_object call flow, should specify additional IDL stub type checking.

If a server cannot process the supported_groups TLS extension or the named groups in the extension, applications can either customize the supported group names with, or turn off the FFDHE mechanisms by setting the System Property jsse.enableFFDHEExtension to false.

security-libs/ - Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS - The JDK SunJSSE implementation now supports the TLS FFDHE mechanisms defined in RFC 7919.

Download java se 8 for mac