-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-68c2fbcf82 2019-10-25 16:59:13.269326 --------------------------------------------------------------------------------
Name : jss Product : Fedora 30 Version : 4.6.2 Release : 1.fc30 URL : http://www.dogtagpki.org/wiki/JSS Summary : Java Security Services (JSS) Description : Java Security Services (JSS) is a java native interface which provides a bridge for java-based applications to use native Network Security Services (NSS). This only works with gcj. Other JREs require that JCE providers be signed.
-------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2019-14823 -------------------------------------------------------------------------------- ChangeLog:
* Tue Oct 15 2019 Dogtag PKI Team pki-devel@redhat.com - 4.6.2-1 - Rebase to JSS 4.6.2 - Fixes CVE-2019-14823 * Thu Aug 8 2019 Dogtag PKI Team pki-devel@redhat.com - 4.6.1-2 - Disable unnecessary tests to fix broken s390x * Thu Aug 8 2019 Dogtag PKI Team pki-devel@redhat.com - 4.6.1-1 - Rebase to JSS 4.6.1 * Mon May 6 2019 Dogtag PKI Team pki-devel@redhat.com - 4.5.3-2 - Add AIA OCSP certificate checking patch * Tue Mar 19 2019 Dogtag PKI Team pki-devel@redhat.com - 4.5.3-1 - Rebase to JSS 4.5.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1747435 - CVE-2019-14823 JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate https://bugzilla.redhat.com/show_bug.cgi?id=1747435 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-68c2fbcf82' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------