Red Hat Product Errata RHBA-2019:2219 - Bug Fix Advisory
Issued:
2019-08-06
Updated:
2019-08-06

RHBA-2019:2219 - Bug Fix Advisory

Synopsis

jss bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for jss is now available for Red Hat Enterprise Linux 7.

Description

Java Security Services (JSS) provides an interface between Java Virtual Machine and Network Security Services (NSS). It supports most of the security standards and encryption technologies supported by NSS including communication through SSL/TLS network protocols. JSS is primarily utilized by the Certificate Server as a part of the Identity Management System.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Users of jss are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1534767 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect
  • BZ - 1582323 - DER encoding error for enumerated types with a value of zero
  • BZ - 1659527 - Rebase JSS in RHEL 7.7
  • BZ - 1666872 - CC: Enable AIA OCSP cert checking for entire cert chain
  • BZ - 1669180 - x25519 allowed in FIPS mode

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
x86_64
jss-4.4.6-1.el7.x86_64.rpm SHA-256: 16f400d7e1954759badc66426761c942424662b42b16df4101723fe2833f0e65
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-javadoc-4.4.6-1.el7.x86_64.rpm SHA-256: 7674b4bceb28530f3d5fc184fa083471b959083f39e822dc2dc47a902c6eff9a

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
x86_64
jss-4.4.6-1.el7.x86_64.rpm SHA-256: 16f400d7e1954759badc66426761c942424662b42b16df4101723fe2833f0e65
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-javadoc-4.4.6-1.el7.x86_64.rpm SHA-256: 7674b4bceb28530f3d5fc184fa083471b959083f39e822dc2dc47a902c6eff9a

Red Hat Enterprise Linux Workstation 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
x86_64
jss-4.4.6-1.el7.x86_64.rpm SHA-256: 16f400d7e1954759badc66426761c942424662b42b16df4101723fe2833f0e65
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-javadoc-4.4.6-1.el7.x86_64.rpm SHA-256: 7674b4bceb28530f3d5fc184fa083471b959083f39e822dc2dc47a902c6eff9a

Red Hat Enterprise Linux Desktop 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
x86_64
jss-4.4.6-1.el7.x86_64.rpm SHA-256: 16f400d7e1954759badc66426761c942424662b42b16df4101723fe2833f0e65
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-javadoc-4.4.6-1.el7.x86_64.rpm SHA-256: 7674b4bceb28530f3d5fc184fa083471b959083f39e822dc2dc47a902c6eff9a

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
s390x
jss-4.4.6-1.el7.s390x.rpm SHA-256: 3f1b86f859f4e6485362edbf66e972ac8dfce13a73966008a206212376fe82d1
jss-debuginfo-4.4.6-1.el7.s390x.rpm SHA-256: d12a4983b7d3dfb29283c74f62b30cac5ec12eb125c166fcff33a539b7fc7488
jss-debuginfo-4.4.6-1.el7.s390x.rpm SHA-256: d12a4983b7d3dfb29283c74f62b30cac5ec12eb125c166fcff33a539b7fc7488
jss-javadoc-4.4.6-1.el7.s390x.rpm SHA-256: 9703f8e0f76d0b662a718c67054964cff59dbb59eb2c6942bc4e950470214cc2

Red Hat Enterprise Linux for Power, big endian 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
ppc64
jss-4.4.6-1.el7.ppc64.rpm SHA-256: e61de0dc4ebc28ceb9fe600547f0acf55cc63277f38c1fe1dffcb9bbbdf5e98c
jss-debuginfo-4.4.6-1.el7.ppc64.rpm SHA-256: 111ec37fd0190ec557388e0b46df3fdf85f9c3e3816584d40959b28819c2218c
jss-debuginfo-4.4.6-1.el7.ppc64.rpm SHA-256: 111ec37fd0190ec557388e0b46df3fdf85f9c3e3816584d40959b28819c2218c
jss-javadoc-4.4.6-1.el7.ppc64.rpm SHA-256: 0ce56f91e7af2ac65f246d272911ce52e7b5a97b2176121cfc343766c68b0d9b

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
x86_64
jss-4.4.6-1.el7.x86_64.rpm SHA-256: 16f400d7e1954759badc66426761c942424662b42b16df4101723fe2833f0e65
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-debuginfo-4.4.6-1.el7.x86_64.rpm SHA-256: c926e180d683548a0260254f1c920db24af5ecb7af95c76da85728c7c77bdf37
jss-javadoc-4.4.6-1.el7.x86_64.rpm SHA-256: 7674b4bceb28530f3d5fc184fa083471b959083f39e822dc2dc47a902c6eff9a

Red Hat Enterprise Linux for Power, little endian 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
ppc64le
jss-4.4.6-1.el7.ppc64le.rpm SHA-256: e79101d001a5f15cc9ce07cdf7ae8a6a70960733cc8d1c954d539720d63a2c55
jss-debuginfo-4.4.6-1.el7.ppc64le.rpm SHA-256: 3167a2a303f19fa6cbce435b3229c5bc015ee81ffeb4f5725e9b006d0bf233ee
jss-debuginfo-4.4.6-1.el7.ppc64le.rpm SHA-256: 3167a2a303f19fa6cbce435b3229c5bc015ee81ffeb4f5725e9b006d0bf233ee
jss-javadoc-4.4.6-1.el7.ppc64le.rpm SHA-256: 2e166571d00ef36c13b4032a8bc0e22091150271e7c048b27b810f777aea9db3

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
s390x
jss-4.4.6-1.el7.s390x.rpm SHA-256: 3f1b86f859f4e6485362edbf66e972ac8dfce13a73966008a206212376fe82d1
jss-debuginfo-4.4.6-1.el7.s390x.rpm SHA-256: d12a4983b7d3dfb29283c74f62b30cac5ec12eb125c166fcff33a539b7fc7488
jss-debuginfo-4.4.6-1.el7.s390x.rpm SHA-256: d12a4983b7d3dfb29283c74f62b30cac5ec12eb125c166fcff33a539b7fc7488
jss-javadoc-4.4.6-1.el7.s390x.rpm SHA-256: 9703f8e0f76d0b662a718c67054964cff59dbb59eb2c6942bc4e950470214cc2

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
ppc64
jss-4.4.6-1.el7.ppc64.rpm SHA-256: e61de0dc4ebc28ceb9fe600547f0acf55cc63277f38c1fe1dffcb9bbbdf5e98c
jss-debuginfo-4.4.6-1.el7.ppc64.rpm SHA-256: 111ec37fd0190ec557388e0b46df3fdf85f9c3e3816584d40959b28819c2218c
jss-debuginfo-4.4.6-1.el7.ppc64.rpm SHA-256: 111ec37fd0190ec557388e0b46df3fdf85f9c3e3816584d40959b28819c2218c
jss-javadoc-4.4.6-1.el7.ppc64.rpm SHA-256: 0ce56f91e7af2ac65f246d272911ce52e7b5a97b2176121cfc343766c68b0d9b

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
jss-4.4.6-1.el7.src.rpm SHA-256: f9b0108fcd645e9832ed29c4714cdf82154e6b6eea8afa41b8e1f629a0b4edbd
ppc64le
jss-4.4.6-1.el7.ppc64le.rpm SHA-256: e79101d001a5f15cc9ce07cdf7ae8a6a70960733cc8d1c954d539720d63a2c55
jss-debuginfo-4.4.6-1.el7.ppc64le.rpm SHA-256: 3167a2a303f19fa6cbce435b3229c5bc015ee81ffeb4f5725e9b006d0bf233ee
jss-debuginfo-4.4.6-1.el7.ppc64le.rpm SHA-256: 3167a2a303f19fa6cbce435b3229c5bc015ee81ffeb4f5725e9b006d0bf233ee
jss-javadoc-4.4.6-1.el7.ppc64le.rpm SHA-256: 2e166571d00ef36c13b4032a8bc0e22091150271e7c048b27b810f777aea9db3

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.