Issued:: 2021-05-18
Updated:: 2021-05-18

RHBA-2021:1886 - Bug Fix Advisory

Overview
Updated Packages

Synopsis

scap-security-guide bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for scap-security-guide is now available for Red Hat Enterprise Linux 8.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.4 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 1778188 - [RFE] Add ANSSI-BP-028 to SSG (Minimal, Intermediary and Enhanced Levels)
BZ - 1807173 - [RFE] - add a new rule to scap-security-guide to check that gdm does not enable XDMCP support
BZ - 1873547 - Rules "Set SSH Idle TImeout Interval" and "Set SSH Client Alive Max Count" are fundamentally broken.
BZ - 1889344 - Rebase scap-security-guide in Red Hat Enterprise Linux 8.4 to latest upstream version
BZ - 1907902 - IBM Z (s390x) is not detected as a 64bit architecture
BZ - 1914193 - Description of rule xccdf_org.ssgproject.content_rule_installed_OS_is_vendor_supported description is incorrect
BZ - 1914853 - Rules ssh_client_rekey_limit and use_pam_wheel_for_su miss SRG reference
BZ - 1918742 - Update RHEL 8 STIG profile to DISA STIG v1r1
BZ - 1927019 - RHEL 8.3 Install with CIS Benchmark profile boots to emergency mode on VM set to EFI.

CVEs

(none)

References

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/index

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server - AUS 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
s390x
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
s390x
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
s390x
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
s390x
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for Power, little endian 8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
ppc64le
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
ppc64le
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
ppc64le
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
ppc64le
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server - TUS 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for ARM 64 8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
aarch64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
aarch64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
aarch64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
aarch64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
ppc64le
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
ppc64le
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
ppc64le
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4

SRPM
scap-security-guide-0.1.54-5.el8.src.rpm	SHA-256: cc80f14bdcd8223c8615e59e72a7238158614c196a8f181e0514796dad476d22
x86_64
scap-security-guide-0.1.54-5.el8.noarch.rpm	SHA-256: e56b44b498f23c7c06c406f50052a6d649b7200e4eec8f8dc50b3e2d4372228a
scap-security-guide-doc-0.1.54-5.el8.noarch.rpm	SHA-256: cd2de5c578fe5913d1104f2549e5873b38b4d89ca59ce4c69891d51cd1f03851

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.