Red Hat Product Errata RHBA-2015:0495 - Bug Fix Advisory
Issued:
2015-03-05
Updated:
2015-03-05

RHBA-2015:0495 - Bug Fix Advisory

Synopsis

pesign bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated pesign packages that fix several bugs are now available for Red Hat Enterprise Linux 7.

Description

The pesign packages contain the pesign utility for signing UEFI binaries, as
well as other associated tools.

This update fixes the following bugs:

  • Previously, the manual pages of the pesign utility omitted certain options and

contained some invalid options. A patch has been provided to fix this bug, and
the pesign manual pages are now accurate and complete. (BZ#948850)

  • Prior to this update, position-independent executable (PIE) code and

RELocation Read-Only (RELRO) was missing from the binaries of the pesign
packages. With this update, all pesign binaries are hardened with PIE and RELRO
flags. (BZ#1092542)

  • Previously, due to the use of the ExclusiveArch tag in the pesign spec file,

the pesign packages failed to build for the 64-bit ARM (AArch64) architecture.
This update adds AArch64 to the ExclusiveArch list, and pesign now builds
correctly for all architectures. (BZ#1100042)

Users of pesign are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
  • Red Hat Enterprise Linux Server from RHUI 7 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.7 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.3 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux Server - TUS 7.7 x86_64
  • Red Hat Enterprise Linux Server - TUS 7.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 7.3 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
  • Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

(none)

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - AUS 7.7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - AUS 7.6

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - AUS 7.4

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - AUS 7.3

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Workstation 7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Desktop 7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server from RHUI 7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - TUS 7.7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - TUS 7.6

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux Server - TUS 7.3

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux EUS Compute Node 7.7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux EUS Compute Node 7.6

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux EUS Compute Node 7.5

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux EUS Compute Node 7.4

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux EUS Compute Node 7.3

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3

SRPM
pesign-0.109-9.el7.src.rpm SHA-256: 3aeb08df12f4eec37c89edb1087296820a8e59964dcd6d8fd0082961021b4f5e
x86_64
pesign-0.109-9.el7.x86_64.rpm SHA-256: 4c3eef836d347b9a81a55f0c51c2656be81232c687bdc0a69f0f6f37d1303388
pesign-debuginfo-0.109-9.el7.x86_64.rpm SHA-256: 5657e4eae8a99c74a38e6cc66f81c3be4c82d640db598dc9b37e31d7ba2f0d78

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.