RHBA-2014:0450 - Bug Fix Advisory

Topic

Updated openscap packages that fix several bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

OpenSCAP is an open source project, which enables integration of the SCAP line
of standards. Security Content Automation Protocol (SCAP) is a line of standards
managed by the National Institute of Standards and Technology (NIST). It was
created to provide a standardized approach to maintaining the security of
enterprise systems, such as automatically verifying presence of patches,
checking system security configuration settings, and examining systems for signs
of compromise.

The openscap packages have been upgraded to upstream version 1.0.8, which
provides a number of bug fixes and enhancements over the previous version. In
particular, the new version provides an authenticated scanner that meets the
National Institute of Standards and Technology's (NIST) SCAP 1.2 certification
requirements. (BZ#1090443)

In addition, this update adds the following enhancement:

• With this update, OpenSCAP implements the Script Check Engine (SCE) extension

to SCAP standards. SCE allows auditors to utilize custom scripts along with
their Open Vulnerability and Assessment Language (OVAL) content. Users who wants
to use SCE are advised to install the openscap-engine-sce package. Users who
install the openscap-engine-sce are presented with SCE capabilities within the
oscap scanner tool. Those who do not install the openscap-engine-sce are not
affected. (BZ#1091431)

Users of openscap are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.5 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.5 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.5 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - AUS 6.5 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Server - TUS 6.5 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.5 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 1090443 - Rebase openscap package to meet the SCAP 1.2 specification

CVEs

(none)

References

(none)