Fedora 14 Update: jss-4.2.6-21.fc14

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-14743
2011-10-22 07:43:27
--------------------------------------------------------------------------------

Name        : jss
Product     : Fedora 14
Version     : 4.2.6
Release     : 21.fc14
URL         : http://www.mozilla.org/projects/security/pki/jss/
Summary     : Java Security Services (JSS)
Description :
Java Security Services (JSS) is a java native interface which provides a bridge
for java-based applications to use native Network Security Services (NSS).
This only works with gcj. Other JREs require that JCE providers be signed.

--------------------------------------------------------------------------------
Update Information:

Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
unwrapping keys should be done in the token
support for PKCS5v2; support for secure PKCS12
Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
in-place upgrade( CS 8.0->8.1)
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 19 2011 Christina Fu <cfu at redhat.com> - 4.2.6-21
- Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- support for PKCS5v2; support for secure PKCS12
- Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
  in-place upgrade( CS 8.0->8.1)
* Mon Sep 19 2011 Matthew Harmsen <mharmsen at redhat.com> - 4.2.6-20
- Bugzilla Bug #715621 - Defects revealed by Coverity scan
* Wed Aug 31 2011 Matthew Harmsen <mharmsen at redhat.com> - 4.2.6-19.1
- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
* Mon Aug 15 2011 Christina Fu <cfu at redhat.com> - 4.2.6-19
- Bugzilla Bug 733550 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
* Fri Aug 12 2011 Matthew Harmsen <mharmsen at redhat.com> - 4.2.6-18
- Bugzilla Bug #660436 - Warnings should be cleaned up in JSS build
  (jdennis, mharmsen)
* Wed May 18 2011 Christina Fu <cfu at redhat.com> - 4.2.6-17
- Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode
  and ECC algorithms (support tokens that don't do ECDH)
* Fri Apr  8 2011 Jack Magne <jmagne at redhat.com> - 4.2.6-15.99
- bug 694661 - TKS instance crash during token enrollment.
  Back out of previous patch for #676083.
* Thu Feb 24 2011 Andrew Wnuk <awnuk at redhat.com> - 4.2.6-15
- bug 676083 - JSS: slots not freed
* Wed Feb  9 2011 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 4.2.6-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Mon Jan 31 2011 John Dennis <jdennis at redhat.com> - 4.2.6-13
- remove misleading comment in spec file concerning jar signing
* Tue Jan 11 2011 Kevin Wright <kwright at redhat.com> - 4.2.6-12
- added missing patch line
* Tue Dec 21 2010 Christina Fu <cfu at redhat.com> - 4.2.6-11
- bug 654657 - <jdennis at redhat.com>
  Incorrect socket accept error message due to bad pointer arithmetic
- bug 661142 - <cfu at redhat.com>
  Verification should fail when a revoked certificate is added
* Thu Dec 16 2010 John Dennis <jdennis at redhat.com> - 4.2.6-10
- Resolves: bug 656094 - <jdennis at redhat.com>
  Rebase jss to at least jss-4.2.6-9
- <jdennis at redhat.com>
  merge in updates from Fedora
  move jar location to %{_libdir}/jss and provide symlinks, on 32bit looks like this:
    /usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar
    /usr/lib/jss/jss4-<version>.jar
    /usr/lib/jss/jss4.jar -> jss4-<version>.jar
    /usr/lib/jss/libjss4.so
- bug 654657 - <jdennis at redhat.com>
  Incorrect socket accept error message due to bad pointer arithmetic
- bug 647364 - <cfu at redhat.com>
  Expose updated certificate verification function in JSS
- bug 529945 - <cfu at redhat.com>
  expose NSS calls for OCSP settings
- bug 638833 - <cfu at redhat.com>
  rfe ecc - add ec curve name support in JSS and CS
- <rcritten at redhat.com>
  Need to explicitly catch UnsatisfiedLinkError exception for System.load()
- bug 533304 - <rcritten at redhat.com>
  Move location of libjss4.so to subdirectory and use System.load() to
  load it instead of System.loadLibrary() for Fedora packaging compliance
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update jss' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------