In response to CVE-2018-3639, Spectre V4 (SSB), we had added patch(es) of:
http://pkgs.devel.redhat.com/cgit/rpms/java-1.8.0-openjdk/commit/?h=rhel-8.4.0&id=1211c3e73af8f1eb567ec0716e38ce6456f40f9ahttp://pkgs.devel.redhat.com/cgit/rpms/java-11-openjdk/commit/?h=rhel-8.4.0&id=3c5ec0a61f0f45fe5333fcdc6f7d3778797ac09a
That patch was released with known, very small, performance drop. In time it proved, that this performance regression is making some customers unhappy.
Later the patch(es) for CVE_2018_3639-speculative_store_bypass were definitely denied for upstream inclusion by project reviwers.
As a response to this evolution, we decided to provide two java binaries in our rpms:
java - without the patch(es), and with same performance as usptream jdk
alt-java - with the patch(es) and with the performance regression. This
At the end, we decided that there is only one software in RH repos, which needs use alt-java by default. And that is icedtea-web
See also: INC1447202 (make ITW using the alt-java launcher)
Targeted branches after fedoras and 8.4 are done are 8.3.z and 7.9.z
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (icedtea-web bug fix and enhancement update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHBA-2021:1863