Red Hat Product Errata RHBA-2018:3188 - Bug Fix Advisory
Issued:
2018-10-30
Updated:
2018-10-30

RHBA-2018:3188 - Bug Fix Advisory

Synopsis

jss bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for jss is now available for Red Hat Enterprise Linux 7.

Description

Java Security Services (JSS) provides an interface between Java Virtual Machine and Network Security Services (NSS). It supports most of the security standards and encryption technologies supported by NSS including communication through SSL/TLS network protocols. JSS is primarily utilized by the Certificate Server as a part of the Identity Management System.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

Users of jss are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier decode/encode process alters original data
  • BZ - 1554056 - JSS: Add support for TLS_*_SHA384 ciphers
  • BZ - 1557575 - Re-base jss from 4.4.0 to latest upstream 4.4.x
  • BZ - 1560682 - (RFE) Migrate RHCS x509 cert and crl functionality to JSS
  • BZ - 1575725 - JSS has wrong encoding for ecdsa with sha* AlgorithmIdentifier
  • BZ - 1577991 - org.mozilla.jss.netscape.security.util.ObjectIdentifier cannot parse OID arcs larger than Integer.MAX_VALUE

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
x86_64
jss-4.4.4-3.el7.x86_64.rpm SHA-256: 9455547e4ba6834adccfcb39bcedd66b83d5eb44c75c12218cd53ccdda0a5f92
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-javadoc-4.4.4-3.el7.x86_64.rpm SHA-256: 67c1bacee26fb2381defb5fad92493e751d336038e2b318a0993f1fa9ecbaa5c

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
x86_64
jss-4.4.4-3.el7.x86_64.rpm SHA-256: 9455547e4ba6834adccfcb39bcedd66b83d5eb44c75c12218cd53ccdda0a5f92
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-javadoc-4.4.4-3.el7.x86_64.rpm SHA-256: 67c1bacee26fb2381defb5fad92493e751d336038e2b318a0993f1fa9ecbaa5c

Red Hat Enterprise Linux Workstation 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
x86_64
jss-4.4.4-3.el7.x86_64.rpm SHA-256: 9455547e4ba6834adccfcb39bcedd66b83d5eb44c75c12218cd53ccdda0a5f92
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-javadoc-4.4.4-3.el7.x86_64.rpm SHA-256: 67c1bacee26fb2381defb5fad92493e751d336038e2b318a0993f1fa9ecbaa5c

Red Hat Enterprise Linux Desktop 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
x86_64
jss-4.4.4-3.el7.x86_64.rpm SHA-256: 9455547e4ba6834adccfcb39bcedd66b83d5eb44c75c12218cd53ccdda0a5f92
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-javadoc-4.4.4-3.el7.x86_64.rpm SHA-256: 67c1bacee26fb2381defb5fad92493e751d336038e2b318a0993f1fa9ecbaa5c

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
s390x
jss-4.4.4-3.el7.s390x.rpm SHA-256: fa3c7214e5bb345a552fcd4534f7e54b33dd56909454884a2cabeb645d06ea22
jss-debuginfo-4.4.4-3.el7.s390x.rpm SHA-256: 9f82e6c1e498497a04e71a85fac33e45028c291684f79bffa0693d8b92b7dfe8
jss-debuginfo-4.4.4-3.el7.s390x.rpm SHA-256: 9f82e6c1e498497a04e71a85fac33e45028c291684f79bffa0693d8b92b7dfe8
jss-javadoc-4.4.4-3.el7.s390x.rpm SHA-256: cd3ac5f2800dafe71b15292254e661a9b7e73200d527e107f693d743c00b50c0

Red Hat Enterprise Linux for Power, big endian 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
ppc64
jss-4.4.4-3.el7.ppc64.rpm SHA-256: 75abba326ecab861e591ab8c594a7102836e001bbd5a03a22bff78ffef6a5f11
jss-debuginfo-4.4.4-3.el7.ppc64.rpm SHA-256: 28556ea484578404f2fea7e06237da9cdd3088d230138ebea2b1b96004e90990
jss-debuginfo-4.4.4-3.el7.ppc64.rpm SHA-256: 28556ea484578404f2fea7e06237da9cdd3088d230138ebea2b1b96004e90990
jss-javadoc-4.4.4-3.el7.ppc64.rpm SHA-256: ea3ae6d2a1b38ec814a43a9f9f2519a9f0b87b33befe6f5dd16d362f05eb5de1

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
x86_64
jss-4.4.4-3.el7.x86_64.rpm SHA-256: 9455547e4ba6834adccfcb39bcedd66b83d5eb44c75c12218cd53ccdda0a5f92
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-debuginfo-4.4.4-3.el7.x86_64.rpm SHA-256: e144043c1aa2c540dae16562fc234eef6d09da546f9eb7f3c19bee6701e6621f
jss-javadoc-4.4.4-3.el7.x86_64.rpm SHA-256: 67c1bacee26fb2381defb5fad92493e751d336038e2b318a0993f1fa9ecbaa5c

Red Hat Enterprise Linux for Power, little endian 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
ppc64le
jss-4.4.4-3.el7.ppc64le.rpm SHA-256: 855c7ea53e3c441300586771d651d3347d844361de3a8c03dd688acd0b5d11e1
jss-debuginfo-4.4.4-3.el7.ppc64le.rpm SHA-256: 684c818509a02ada7d2aa9214fe94d60b405ba5755a69c13253cb8a2a85fce45
jss-debuginfo-4.4.4-3.el7.ppc64le.rpm SHA-256: 684c818509a02ada7d2aa9214fe94d60b405ba5755a69c13253cb8a2a85fce45
jss-javadoc-4.4.4-3.el7.ppc64le.rpm SHA-256: 49cd031a34486de6bc14d6cee3c24b640aee16345415199fcb718bb4b92b9945

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
s390x
jss-4.4.4-3.el7.s390x.rpm SHA-256: fa3c7214e5bb345a552fcd4534f7e54b33dd56909454884a2cabeb645d06ea22
jss-debuginfo-4.4.4-3.el7.s390x.rpm SHA-256: 9f82e6c1e498497a04e71a85fac33e45028c291684f79bffa0693d8b92b7dfe8
jss-debuginfo-4.4.4-3.el7.s390x.rpm SHA-256: 9f82e6c1e498497a04e71a85fac33e45028c291684f79bffa0693d8b92b7dfe8
jss-javadoc-4.4.4-3.el7.s390x.rpm SHA-256: cd3ac5f2800dafe71b15292254e661a9b7e73200d527e107f693d743c00b50c0

Red Hat Enterprise Linux for ARM 64 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
aarch64
jss-4.4.4-3.el7.aarch64.rpm SHA-256: f401643def71b2186a8a61a4072ead80d921699424a2e9cb65f965a8b5ec35b9
jss-debuginfo-4.4.4-3.el7.aarch64.rpm SHA-256: b1541a15864e6e241bc880dbff90eee015811a46a28fa206ec98a3e1407a40e1
jss-debuginfo-4.4.4-3.el7.aarch64.rpm SHA-256: b1541a15864e6e241bc880dbff90eee015811a46a28fa206ec98a3e1407a40e1
jss-javadoc-4.4.4-3.el7.aarch64.rpm SHA-256: 79e77d6c6ea1c493fe2834ac77d1b6ab525df28f0fb9e2be78dfb3d067d250fb

Red Hat Enterprise Linux for Power 9 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
ppc64le
jss-4.4.4-3.el7.ppc64le.rpm SHA-256: 855c7ea53e3c441300586771d651d3347d844361de3a8c03dd688acd0b5d11e1
jss-debuginfo-4.4.4-3.el7.ppc64le.rpm SHA-256: 684c818509a02ada7d2aa9214fe94d60b405ba5755a69c13253cb8a2a85fce45
jss-debuginfo-4.4.4-3.el7.ppc64le.rpm SHA-256: 684c818509a02ada7d2aa9214fe94d60b405ba5755a69c13253cb8a2a85fce45
jss-javadoc-4.4.4-3.el7.ppc64le.rpm SHA-256: 49cd031a34486de6bc14d6cee3c24b640aee16345415199fcb718bb4b92b9945

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
s390x
jss-4.4.4-3.el7.s390x.rpm SHA-256: fa3c7214e5bb345a552fcd4534f7e54b33dd56909454884a2cabeb645d06ea22
jss-debuginfo-4.4.4-3.el7.s390x.rpm SHA-256: 9f82e6c1e498497a04e71a85fac33e45028c291684f79bffa0693d8b92b7dfe8
jss-debuginfo-4.4.4-3.el7.s390x.rpm SHA-256: 9f82e6c1e498497a04e71a85fac33e45028c291684f79bffa0693d8b92b7dfe8
jss-javadoc-4.4.4-3.el7.s390x.rpm SHA-256: cd3ac5f2800dafe71b15292254e661a9b7e73200d527e107f693d743c00b50c0

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
ppc64
jss-4.4.4-3.el7.ppc64.rpm SHA-256: 75abba326ecab861e591ab8c594a7102836e001bbd5a03a22bff78ffef6a5f11
jss-debuginfo-4.4.4-3.el7.ppc64.rpm SHA-256: 28556ea484578404f2fea7e06237da9cdd3088d230138ebea2b1b96004e90990
jss-debuginfo-4.4.4-3.el7.ppc64.rpm SHA-256: 28556ea484578404f2fea7e06237da9cdd3088d230138ebea2b1b96004e90990
jss-javadoc-4.4.4-3.el7.ppc64.rpm SHA-256: ea3ae6d2a1b38ec814a43a9f9f2519a9f0b87b33befe6f5dd16d362f05eb5de1

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
jss-4.4.4-3.el7.src.rpm SHA-256: 46d6116dda40fdc524419c0e3371e33c7ef551af9119825f7f53b55f93ab6c8d
ppc64le
jss-4.4.4-3.el7.ppc64le.rpm SHA-256: 855c7ea53e3c441300586771d651d3347d844361de3a8c03dd688acd0b5d11e1
jss-debuginfo-4.4.4-3.el7.ppc64le.rpm SHA-256: 684c818509a02ada7d2aa9214fe94d60b405ba5755a69c13253cb8a2a85fce45
jss-debuginfo-4.4.4-3.el7.ppc64le.rpm SHA-256: 684c818509a02ada7d2aa9214fe94d60b405ba5755a69c13253cb8a2a85fce45
jss-javadoc-4.4.4-3.el7.ppc64le.rpm SHA-256: 49cd031a34486de6bc14d6cee3c24b640aee16345415199fcb718bb4b92b9945

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.