RHBA-2015:1370 - Bug Fix Advisory

Topic

Updated coolkey packages that fix one bug are now available for Red Hat
Enterprise Linux 6.

Description

The coolkey packages provide the coolkey smart card support library for the
CoolKey, common access card (CAC), and personal identity verification (PIV)
smart cards.

This update fixes the following bug:

• Previously, after the user inserted a contactless PIV card, coolkey could not

access it in a contactless way. As a consequence, the light indicating the card
status started to blink inconsistently, and the Enterprise Security Client (ESC)
failed to detect the card. With this patch, coolkey accesses the card
certificate or key instead of the PIV authentication, PIV signing, or PIV key
exchange keys. As a result, when the user inserts a contactless PIV card, ECS
now successfully detects it. (BZ#1115626)

Users of coolkey are advised to upgrade to these updated packages, which fix
this bug.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64

Fixes

• BZ - 1115626 - Coolkey does not support contactless PIV cards
• BZ - 1209178 - ESC does not prompt for home phone url when a blank smart card is inserted

CVEs

(none)

References

(none)