- Issued:
- 2021-07-20
- Updated:
- 2021-07-20
RHBA-2021:2803 - Bug Fix Advisory
Synopsis
scap-security-guide bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for scap-security-guide is now available for Red Hat Enterprise
Linux 7.
Description
The scap-security-guide project provides a guide for configuration of the
system from the final system's security point of view. The guidance is
specified in the Security Content Automation Protocol (SCAP) format and
constitutes a catalog of practical hardening advice, linked to government
requirements where applicable. The project bridges the gap between
generalized policy requirements and specific implementation guidelines.
Bug Fix(es) and Enhancement(s):
- Update ANSSI-BP-028 High level profile (BZ#1955180)
- Update rhel7 DISA STIG profile to v3r3 (BZ#1958789)
- dconf_gnome_login_retries remediation results in error and breaks dconf
configuration file (BZ#1967566)
- Add STIG variant for GUI installations (BZ#1970131)
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Enterprise Linux Server 7 x86_64
- Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
- Red Hat Enterprise Linux Workstation 7 x86_64
- Red Hat Enterprise Linux Desktop 7 x86_64
- Red Hat Enterprise Linux for IBM z Systems 7 s390x
- Red Hat Enterprise Linux for Power, big endian 7 ppc64
- Red Hat Enterprise Linux for Scientific Computing 7 x86_64
- Red Hat Enterprise Linux for Power, little endian 7 ppc64le
- Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
- Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
- Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
Fixes
- BZ - 1955180 - Update ANSSI-BP-028 High level profile
- BZ - 1958789 - Update rhel7 DISA STIG profile to v3r3
- BZ - 1967566 - dconf_gnome_login_retries remediation results in error and breaks dconf configuration file
- BZ - 1970131 - Add STIG variant for GUI installations
CVEs
(none)
References
(none)
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux Server 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| x86_64 | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| x86_64 | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux Workstation 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| x86_64 | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux Desktop 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| x86_64 | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux for IBM z Systems 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| s390x | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux for Power, big endian 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| ppc64 | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux for Scientific Computing 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| x86_64 | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux for Power, little endian 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| ppc64le | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| s390x | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| ppc64 | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7
| SRPM | |
|---|---|
| scap-security-guide-0.1.54-7.el7_9.src.rpm | SHA-256: 71e81669f1cbcc83931eb4de126b94d5a061ae764b2480e950ff944650c4d655 |
| ppc64le | |
| scap-security-guide-0.1.54-7.el7_9.noarch.rpm | SHA-256: 0b3eb17e6e853e75ba45f4c1c64859645af1dccf8f71d122b9a0eee50880e31b |
| scap-security-guide-doc-0.1.54-7.el7_9.noarch.rpm | SHA-256: 2c5dd3c53d347867c67bfb8d587674cdb332c7899fa21d1f962a34c0284f2303 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
