RHBA-2015:0522 - Bug Fix Advisory

Topic

An updated tomcatjss package that fixes one bug and adds one enhancement is now available for Red Hat Enterprise Linux 7.

Description

The tomcatjss package provides a Java Secure Socket Extension (JSSE)
implementation using Java Security Services (JSS) for Tomcat, an open source web
server and Java servlet container.

This update fixes the following bug:

• Previously, the init() function in tomcatjss looked for the clientauth

attribute which was not present. As a consequence, Tomcat returned
NullPointerException in init() on startup, and in addition, some properties,
such as enableOSCP and properties for enabling certain SSL ciphers, were not
called. A patch has been applied to fix this problem. As a result,
NullPointerException no longer occurs in the described situation, and the
mentioned properties are called as expected. (BZ#1058366)

In addition, this update adds the following enhancement:

• The Tomcat service has been updated to support the Transport Layer Security

cryptographic protocol version 1.1 (TLSv1.1) and the Transport Layer Security
cryptographic protocol version 1.2 (TLSv1.2) using JSS. (BZ#871171)

Users of tomcatjss are advised to upgrade to this updated package, which fixes
this bug and adds this enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 871171 - Provide Tomcat support for TLS v1.1 and TLS v1.2 (Tomcatjss)
• BZ - 1058366 - NullPointerException in tomcatjss searching for attribute "clientauth"

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal