Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
An update for jss is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, . -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: jss security update Advisory ID: RHSA-2019:3225-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:3225 Issue date: 2019-10-29 CVE Names: CVE-2019-14823 ==================================================================== 1. Summary: An update for jss is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) - x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) - x86_64 Red Hat Enterprise Linux Server EUS (v. 7.6) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 7.6) - ppc64, ppc64le, s390x, x86_64 3. Description: Java Security Services (JSS) provides an interface between Java Virtual Machine and Network Security Services (NSS). It supports most of the security standards and encryption technologies supported by NSS including communication through SSL/TLS network protocols. JSS is primarily utilized by the Certificate Server as a part of the Identity Management System. Security Fix(es): * JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate (CVE-2019-14823) For more details about the security issue(s), including the impact, aCVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1747435 - CVE-2019-14823 JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.6): Source: jss-4.4.4-6.el7_6.src.rpm x86_64: jss-4.4.4-6.el7_6.x86_64.rpm jss-debuginfo-4.4.4-6.el7_6.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6): x86_64: jss-debuginfo-4.4.4-6.el7_6.x86_64.rpm jss-javadoc-4.4.4-6.el7_6.x86_64.rpm Red Hat Enterprise Linux Server EUS (v. 7.6): Source: jss-4.4.4-6.el7_6.src.rpm ppc64: jss-4.4.4-6.el7_6.ppc64.rpm jss-debuginfo-4.4.4-6.el7_6.ppc64.rpm ppc64le: jss-4.4.4-6.el7_6.ppc64le.rpm jss-debuginfo-4.4.4-6.el7_6.ppc64le.rpm s390x: jss-4.4.4-6.el7_6.s390x.rpm jss-debuginfo-4.4.4-6.el7_6.s390x.rpm x86_64: jss-4.4.4-6.el7_6.x86_64.rpm jss-debuginfo-4.4.4-6.el7_6.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v. 7.6): ppc64: jss-debuginfo-4.4.4-6.el7_6.ppc64.rpm jss-javadoc-4.4.4-6.el7_6.ppc64.rpm ppc64le: jss-debuginfo-4.4.4-6.el7_6.ppc64le.rpm jss-javadoc-4.4.4-6.el7_6.ppc64le.rpm s390x: jss-debuginfo-4.4.4-6.el7_6.s390x.rpm jss-javadoc-4.4.4-6.el7_6.s390x.rpm x86_64: jss-debuginfo-4.4.4-6.el7_6.x86_64.rpm jss-javadoc-4.4.4-6.el7_6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-14823 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE-----Version: GnuPG v1 iQIVAwUBXbhG5dzjgjWX9erEAQjVsA//feETv4oB6RVf8f57eRoc9BNBlK1+f4bv 0UkpmK2SNz1oL7LJlxtdFzdI56D7HsXaKuvYKPhNjkvy8A6wXuguhQ4skAM+Vjxt ZfMQXyUxg/gkdZShjit/E+QDmiEdU24A23XIqQDze2O3/l/o9AJ72G0GAkoZXdEC gX4Wp4cO6B1lXrAJyyPYzrvvekbk8LXXlxVySG09Rkgnr+zZz8WJoyftCA7rrIaA O+KkYtgbNMSI9l4Pc4rIc6TyH2j/Lb0jSbILpFXu9fGksIMcY6Ldp8qJNCeysD+5 VH/Prt8eg5jXO3gxox4hZLPKcO3JZRjVrJESxgr+ik9dtOC9GOwVSslRsghe2Ih+ TXF0eH7NyJxHGfeoHAhgQmuT7IL0SSDK7V8RHmm+sPoYG/r4mBLfL0oEn+4peqhl tEkhgEfPM+i8hBiUjRJv+VGU96nk8rjDAZr9M5j6LLUDgKQ7F2uM3de/HAJgRG5E /BlJQ/rhJwwFsmR6r3+g/G0vHXQNVabA6c6CtNlFkgXmy9hVBdNOqiEpbrrHw7GC JyMKk/9CEyy7JPlQ7DI1HvpdAztEhQxI1mhjo62hMAEsDWGcnM5jrKb/zkwdk88n iXoDG3rwW4RQ0k7bhKl2+ufZFDBkr6s7ekedP5+loNq6XkpMZtTgJB0hogakx/9S hyAI+aMmfOw=lsOj -----END PGP SIGNATURE-------RHSA-announce mailing list
Security fix for CVE-2019-14823. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-24a0a2f24e 2019-10-26 17:17:38.272787 --------------------------------------------------------------------------------Name : jss Product : Fedora 31 Version : 4.6.2 Release : 1.fc31 URL : https://www.dogtagpki.org/wiki/JSS Summary : Java Security Services (JSS) Description : Java Security Services (JSS) is a java native interface which provides a bridge for java-based applications to use native Network Security Services (NSS). This only works with gcj. Other JREs require that JCE providers be signed. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2019-14823 --------------------------------------------------------------------------------ChangeLog: * Tue Oct 15 2019 Dogtag PKI Team - 4.6.2-1 - Rebase to JSS 4.6.2 - Fixes CVE-2019-14823 --------------------------------------------------------------------------------References: [ 1 ] Bug #1747435 - CVE-2019-14823 JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate https://bugzilla.redhat.com/show_bug.cgi?id=1747435 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-24a0a2f24e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Security fix for CVE-2019-14823. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-4d33c62860 2019-10-25 18:06:00.866440 --------------------------------------------------------------------------------Name : jss Product : Fedora 29 Version : 4.6.2 Release : 1.fc29 URL : https://www.dogtagpki.org/wiki/JSS Summary : Java Security Services (JSS) Description : Java Security Services (JSS) is a java native interface which provides a bridge for java-based applications to use native Network Security Services (NSS). This only works with gcj. Other JREs require that JCE providers be signed. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2019-14823 --------------------------------------------------------------------------------ChangeLog: * Tue Oct 15 2019 Dogtag PKI Team - 4.6.2-1 - Rebase to JSS 4.6.2 - Fixes CVE-2019-14823 * Thu Aug 8 2019 Dogtag PKI Team - 4.6.1-2 - Disable unnecessary tests to fix broken s390x * Thu Aug 8 2019 Dogtag PKI Team - 4.6.1-1 - Rebase to JSS 4.6.1 * Mon May 6 2019 Dogtag PKI Team - 4.5.3-2 - Add AIA OCSP certificate checking patch * Tue Mar 19 2019 Dogtag PKI Team - 4.5.3-1 - Rebase to JSS 4.5.3 * Fri Feb 1 2019 Dogtag PKI Team - 4.5.2-3 - Include nuxwdog patch for netscape.security.util.Utils from PKI * Mon Jan 14 2019 Dogtag PKI Team 4.5.2-1 - Rebased to JSS 4.5.2 * Thu Nov 29 2018 Dogtag PKI Team 4.5.1-1 - Rebased to JSS 4.5.1 - Red Hat Bugzilla #1582323 - DER encoding error for enumerated types with a value of zero - Red Hat Bugzilla #1534765 - javadoc for org.mozilla.jss.pkix.cms.SignedData.getSignerInfos() is incorrect --------------------------------------------------------------------------------References: [ 1 ] Bug #1747435 - CVE-2019-14823 JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate https://bugzilla.redhat.com/show_bug.cgi?id=1747435 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-4d33c62860' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Security fix for CVE-2019-14823. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-68c2fbcf82 2019-10-25 16:59:13.269326 --------------------------------------------------------------------------------Name : jss Product : Fedora 30 Version : 4.6.2 Release : 1.fc30 URL : https://www.dogtagpki.org/wiki/JSS Summary : Java Security Services (JSS) Description : Java Security Services (JSS) is a java native interface which provides a bridge for java-based applications to use native Network Security Services (NSS). This only works with gcj. Other JREs require that JCE providers be signed. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2019-14823 --------------------------------------------------------------------------------ChangeLog: * Tue Oct 15 2019 Dogtag PKI Team - 4.6.2-1 - Rebase to JSS 4.6.2 - Fixes CVE-2019-14823 * Thu Aug 8 2019 Dogtag PKI Team - 4.6.1-2 - Disable unnecessary tests to fix broken s390x * Thu Aug 8 2019 Dogtag PKI Team - 4.6.1-1 - Rebase to JSS 4.6.1 * Mon May 6 2019 Dogtag PKI Team - 4.5.3-2 - Add AIA OCSP certificate checking patch * Tue Mar 19 2019 Dogtag PKI Team - 4.5.3-1 - Rebase to JSS 4.5.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1747435 - CVE-2019-14823 JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate https://bugzilla.redhat.com/show_bug.cgi?id=1747435 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-68c2fbcf82' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3067. CentOS Errata and Security Advisory 2019:3067 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:3067 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 46c62a5595fc6f5d5b787bebf5973483bf2c8268b13a5ae0dad645cf3891d29f jss-4.4.6-3.el7_7.x86_64.rpm e55c927b79b1926c9cc2430d290e2440a1735492c35915e8dee2ead2460c3604 jss-javadoc-4.4.6-3.el7_7.x86_64.rpm Source: ebf5d22edee2ac71ecd7bd85b777bb1126324c70eb34d64ab0c5afcec4369efc jss-4.4.6-3.el7_7.src.rpm -- Johnny Hughes CentOS Project { https://www.centos.org/ } irc: hughesjr, #
An update for jss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: jss security update Advisory ID: RHSA-2019:3067-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:3067 Issue date: 2019-10-15 CVE Names: CVE-2019-14823 ==================================================================== 1. Summary: An update for jss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Java Security Services (JSS) provides an interface between Java Virtual Machine and Network Security Services (NSS). It supports most of the security standards and encryption technologies supported by NSS including communication through SSL/TLS network protocols. JSS is primarily utilized by the Certificate Server as a part of the Identity ManagementSystem. Security Fix(es): * JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate (CVE-2019-14823) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1747435 - CVE-2019-14823 JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: jss-4.4.6-3.el7_7.src.rpm x86_64: jss-4.4.6-3.el7_7.x86_64.rpm jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm jss-javadoc-4.4.6-3.el7_7.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: jss-4.4.6-3.el7_7.src.rpm x86_64: jss-4.4.6-3.el7_7.x86_64.rpm jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm jss-javadoc-4.4.6-3.el7_7.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: jss-4.4.6-3.el7_7.src.rpm ppc64: jss-4.4.6-3.el7_7.ppc64.rpm jss-debuginfo-4.4.6-3.el7_7.ppc64.rpm ppc64le: jss-4.4.6-3.el7_7.ppc64le.rpm jss-debuginfo-4.4.6-3.el7_7.ppc64le.rpm s390x: jss-4.4.6-3.el7_7.s390x.rpm jss-debuginfo-4.4.6-3.el7_7.s390x.rpm x86_64: jss-4.4.6-3.el7_7.x86_64.rpm jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: jss-debuginfo-4.4.6-3.el7_7.ppc64.rpm jss-javadoc-4.4.6-3.el7_7.ppc64.rpm ppc64le: jss-debuginfo-4.4.6-3.el7_7.ppc64le.rpm jss-javadoc-4.4.6-3.el7_7.ppc64le.rpm s390x: jss-debuginfo-4.4.6-3.el7_7.s390x.rpm jss-javadoc-4.4.6-3.el7_7.s390x.rpm x86_64: jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm jss-javadoc-4.4.6-3.el7_7.x86_64.rpm Red Hat Enterprise Linux Workstation (v.7): Source: jss-4.4.6-3.el7_7.src.rpm x86_64: jss-4.4.6-3.el7_7.x86_64.rpm jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: jss-debuginfo-4.4.6-3.el7_7.x86_64.rpm jss-javadoc-4.4.6-3.el7_7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-14823 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXaYG2dzjgjWX9erEAQgl4g//ewrQoDnHj/0NSspcLsuSGJXO8QdmejJz StEKgBRw7oEKYKY3nVabUv0VKewaNtiaL8ZyxzQAq7Kp1+CnG2dA3mp08qA8Qua3 3KvjKN7d+/Y1BqfzIhom3uPqDWxTigkePbx9Ln2WnT+Yhv04zqbxsT9Dcuv6YbET AxxHQvwiSDDiCiHNAQi0DAXncBWfW1hjWIGAIofYuI5HHzlOo6BOyWkMNtnLFgcZ ljSHMcvLVbgFbSjpSIM2wM/bSUZXJhxxiCdA3T8Shi8EL04UB7uEsCpCEUKJ9wed 1kLWvhKG1hLnaAl9L0taKUlMStMWVmzIgBr2vsoDpdJOpaQn3In8VmTBnQIQj/A+ CgAp7NzZg+pRbKtGaQg0fTTktXTef2NlahSye41v1GVaxgJeyeGcxlVzVPFibBQt T3OFe0hXKMjPmO99Rz+cr/cDJpD2m1uXrOnAGfkTAewXVyBNPOrpG50hodMda7gP q2mtO5FCmExX7dQm1LyxitKNKg6dJbXwCi+QYTcqyPT1mY3pf7cXfrFVZ8ZXO+xY 7PPB3+L/09vBt1vSvSfndzBXx+aMt3zQq1D+l4Y3MfXXkm0nTTUj3ZKKymyNS1ey AFeBpxt181bvq42pH1xqNTQXH8EZZmNTIeaXe9sK7N7/4HYZ/MVSf2DcZ1JopFP+ ypW9kz0D1CM=AWDo -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.