RHBA-2015:0366 - Bug Fix Advisory

Topic

Updated strongimcv packages that fix several bugs and add various enhancements
are now available for Red Hat Enterprise Linux 7.

Description

The strongimcv packages provide Trusted Network Connect's (TNC) architecture
support. They include support for a TNC client and server (IF-TNCCS), Integrity
Measurement Collector (IMC) and Integrity Measurement Verifier (IMV) message
exchange (IF-M), as well as an interface between IMC/IMV and a TNC client/server
(IF-IMC and IF-IMV). They also include PTS-based IMC/IMV for TPM-based remote
attestation, SWID IMC/IMV, and OS IMC/IMV.

The strongimcv packages have been upgraded to upstream version 5.2.0, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#1120371)

This update also fixes the following bugs:

• Previously, the strongimcv policy script used a hard-coded name for the

strongimcv executable, which did not correspond with the executable name in Red
Hat Enterprise Linux 7. As a consequence, running the strongimcv policy manager
in Red Hat Enterprise Linux 7 failed. This update modifies the policy script to
use a flexible executable name, which prevents the described problem.
(BZ#1144511)

• Due to threading incompatibility with the strongimcv OpenSSL plug-in, the

wpa_supplicant program terminated unexpectedly with a segmentation fault after a
TNC negotiation finished if wpa_supplicant was running along with strongimcv.
With this update, the strongimcv OpenSSL plug-in has been update to be
thread-compatible with wpa_supplicant, and wpa_supplicant no longer crashes
after TNC negotiations. (BZ#1144524)

• Prior to this update, the Transport Layer Security (TLS) protocol client of

strongimcv was not compatible with the 64-bit PowerPC microarchitecture. As a
consequence, using the "strongimcv pt-tls-client" command on a 64-bit PowerPC
machine failed. This update addresses the compatibility problems and "strongimcv
pt-tls-client" now works as expected on 64-bit PowerPC machines. (BZ#1179330)

Users of strongimcv are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 1179330 - TLS does not work on ppc64

CVEs

(none)

References

(none)