Summary
* Thu Sep 12 2019 Dogtag PKI Team <pki-devel@redhat.com 4.4.6-3
- NVR bump
[4.4.6-2]
- Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy 'Leaf and Chain' implicitly trusts the root certificate
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | jss | 0:4.4.6-3.el7_7 |
| Oracle Linux · 7 | jss-javadoc | 0:4.4.6-3.el7_7 |
Vulnerabilities 1
-
Medium 6.8
A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, …