Issued:
2019-03-12
Updated:
2019-03-12

RHBA-2019:0505 - Bug Fix Advisory

Synopsis

jss bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated jss packages that fix two bugs are now available for Red Hat Enterprise Linux 7.

Description

Java Security Services (JSS) provides an interface between Java Virtual Machine and Network Security Services (NSS). It supports most of the security standards and encryption technologies supported by NSS including communication through SSL/TLS network protocols. JSS is primarily utilized by the Certificate Server as a part of the Identity Management System.

This update fixes the following bugs:

  • x25519 allowed in FIPS mode (BZ#1671244)
  • CC: Enable AIA OCSP cert checking for entire cert chain (BZ#1671247)

Users of jss are advised to upgrade to these updated packages, which fix this
bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.6 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
  • Red Hat Enterprise Linux Server - TUS 7.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Fixes

  • BZ - 1671244 - x25519 allowed in FIPS mode [rhel-7.6.z]
  • BZ - 1671247 - CC: Enable AIA OCSP cert checking for entire cert chain [rhel-7.6.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux Workstation 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux Desktop 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
s390x
jss-4.4.4-5.el7_6.s390x.rpm SHA-256: 5049e2365cf2e6528b445d30e239594725b9c37b7c922270d953e3c83bb6ef47
jss-debuginfo-4.4.4-5.el7_6.s390x.rpm SHA-256: cb20c1b874e54e67663dfcd830e5c9e1cfa560b7dcaee5b57967c4cb9780b27d
jss-debuginfo-4.4.4-5.el7_6.s390x.rpm SHA-256: cb20c1b874e54e67663dfcd830e5c9e1cfa560b7dcaee5b57967c4cb9780b27d
jss-javadoc-4.4.4-5.el7_6.s390x.rpm SHA-256: 0ebccd68a0e568005aa254a5a201ede99d0264c83fd1d490055343217e071947

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
s390x
jss-4.4.4-5.el7_6.s390x.rpm SHA-256: 5049e2365cf2e6528b445d30e239594725b9c37b7c922270d953e3c83bb6ef47
jss-debuginfo-4.4.4-5.el7_6.s390x.rpm SHA-256: cb20c1b874e54e67663dfcd830e5c9e1cfa560b7dcaee5b57967c4cb9780b27d
jss-debuginfo-4.4.4-5.el7_6.s390x.rpm SHA-256: cb20c1b874e54e67663dfcd830e5c9e1cfa560b7dcaee5b57967c4cb9780b27d
jss-javadoc-4.4.4-5.el7_6.s390x.rpm SHA-256: 0ebccd68a0e568005aa254a5a201ede99d0264c83fd1d490055343217e071947

Red Hat Enterprise Linux for Power, big endian 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
ppc64
jss-4.4.4-5.el7_6.ppc64.rpm SHA-256: 4d750546efa05cb17d63b6871909103945d9638bdf780b232ac26c182d09d19f
jss-debuginfo-4.4.4-5.el7_6.ppc64.rpm SHA-256: 168d58d7fafdd2d570d95d2a8c17143a6a03add1817305ca1f8d018e1fbdded5
jss-debuginfo-4.4.4-5.el7_6.ppc64.rpm SHA-256: 168d58d7fafdd2d570d95d2a8c17143a6a03add1817305ca1f8d018e1fbdded5
jss-javadoc-4.4.4-5.el7_6.ppc64.rpm SHA-256: fffd303b46f6384c40ab529e0d1823b5f93ab4a826831007e48d3c6d3975b7b1

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
ppc64
jss-4.4.4-5.el7_6.ppc64.rpm SHA-256: 4d750546efa05cb17d63b6871909103945d9638bdf780b232ac26c182d09d19f
jss-debuginfo-4.4.4-5.el7_6.ppc64.rpm SHA-256: 168d58d7fafdd2d570d95d2a8c17143a6a03add1817305ca1f8d018e1fbdded5
jss-debuginfo-4.4.4-5.el7_6.ppc64.rpm SHA-256: 168d58d7fafdd2d570d95d2a8c17143a6a03add1817305ca1f8d018e1fbdded5
jss-javadoc-4.4.4-5.el7_6.ppc64.rpm SHA-256: fffd303b46f6384c40ab529e0d1823b5f93ab4a826831007e48d3c6d3975b7b1

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux EUS Compute Node 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux Server - AUS 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux for Power, little endian 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
ppc64le
jss-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 96922f2a3b2cec79a15af7613a0a68e86e72f4b51cc4a6e5446b4b384c851a76
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-javadoc-4.4.4-5.el7_6.ppc64le.rpm SHA-256: d241a37019259b1c2807a8ff890eeee7fdc6cdc26e6ff721e1a0d68f61cb6bb9

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
ppc64le
jss-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 96922f2a3b2cec79a15af7613a0a68e86e72f4b51cc4a6e5446b4b384c851a76
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-javadoc-4.4.4-5.el7_6.ppc64le.rpm SHA-256: d241a37019259b1c2807a8ff890eeee7fdc6cdc26e6ff721e1a0d68f61cb6bb9

Red Hat Enterprise Linux Server - TUS 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux for ARM 64 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
aarch64
jss-4.4.4-5.el7_6.aarch64.rpm SHA-256: 8a2520fe1d9fc7dfd18f521c34830de08ecad361f502b2272c639a417eac0203
jss-debuginfo-4.4.4-5.el7_6.aarch64.rpm SHA-256: e3e630415d3d9a03a18b744edebd7aaf3884f58e9c3b0cf3723eca33725335f4
jss-debuginfo-4.4.4-5.el7_6.aarch64.rpm SHA-256: e3e630415d3d9a03a18b744edebd7aaf3884f58e9c3b0cf3723eca33725335f4
jss-javadoc-4.4.4-5.el7_6.aarch64.rpm SHA-256: e8e0d7fbd8546723f03ebee9b9ca08d107de78e92ffd57dedccdb5d99a7602e2

Red Hat Enterprise Linux for Power 9 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
ppc64le
jss-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 96922f2a3b2cec79a15af7613a0a68e86e72f4b51cc4a6e5446b4b384c851a76
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-javadoc-4.4.4-5.el7_6.ppc64le.rpm SHA-256: d241a37019259b1c2807a8ff890eeee7fdc6cdc26e6ff721e1a0d68f61cb6bb9

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
ppc64le
jss-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 96922f2a3b2cec79a15af7613a0a68e86e72f4b51cc4a6e5446b4b384c851a76
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-debuginfo-4.4.4-5.el7_6.ppc64le.rpm SHA-256: 275d1a6e9f22536fac700918940dcbddd68ff35a950c33db51da69300320e089
jss-javadoc-4.4.4-5.el7_6.ppc64le.rpm SHA-256: d241a37019259b1c2807a8ff890eeee7fdc6cdc26e6ff721e1a0d68f61cb6bb9

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
x86_64
jss-4.4.4-5.el7_6.x86_64.rpm SHA-256: c9fa67af561cf77f13fdb6b554b3341e9778bb9ba805a35da0aaec04453a894e
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-debuginfo-4.4.4-5.el7_6.x86_64.rpm SHA-256: 499fb4be8a014d41ed609b5c17962446983828c3b586a2c9068c60b5e3957638
jss-javadoc-4.4.4-5.el7_6.x86_64.rpm SHA-256: 8f4a896970bdc05415e16d5ea830c3356fbf2150b4e361f2c8772dfece2a4d23

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
jss-4.4.4-5.el7_6.src.rpm SHA-256: c466cf5def91c12faacaddd84eb3b12d0ec2dd4c7e441794a8315071a5cb5d37
s390x
jss-4.4.4-5.el7_6.s390x.rpm SHA-256: 5049e2365cf2e6528b445d30e239594725b9c37b7c922270d953e3c83bb6ef47
jss-debuginfo-4.4.4-5.el7_6.s390x.rpm SHA-256: cb20c1b874e54e67663dfcd830e5c9e1cfa560b7dcaee5b57967c4cb9780b27d
jss-debuginfo-4.4.4-5.el7_6.s390x.rpm SHA-256: cb20c1b874e54e67663dfcd830e5c9e1cfa560b7dcaee5b57967c4cb9780b27d
jss-javadoc-4.4.4-5.el7_6.s390x.rpm SHA-256: 0ebccd68a0e568005aa254a5a201ede99d0264c83fd1d490055343217e071947

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.