Issued:: 2021-11-02
Updated:: 2021-11-02

RHBA-2021:4098 - Bug Fix Advisory

Overview
Updated Packages

Synopsis

scap-security-guide bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for scap-security-guide is now available for Red Hat Enterprise
Linux 8.

Description

The scap-security-guide project provides a guide for configuration of the
system from the final system's security point of view. The guidance is
specified in the Security Content Automation Protocol (SCAP) format and
constitutes a catalog of practical hardening advice, linked to government
requirements where applicable. The project bridges the gap between
generalized policy requirements and specific implementation guidelines.

Bug Fix(es) and Enhancement(s):

Update RHEL 8 STIG profile to V1R3 (BZ#1997634)
CIS compliance profile does not represent structure of the policy

(BZ#2005427)

Add ANSSI-BP-028 High level profile (BZ#2005429)
Add STIG variant for GUI installations (BZ#2005431)
[RFE] Add support for ACSC ISM 'Official' profile (BZ#2005891)
Rule package_rear_installed should not be applicable on s390x

(BZ#2013553)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 1997634 - Update RHEL 8 STIG profile to V1R3 [rhel-8.4.0.z]
BZ - 2005427 - CIS compliance profile does not represent structure of the policy [rhel-8.4.0.z]
BZ - 2005429 - Add ANSSI-BP-028 High level profile [rhel-8.4.0.z]
BZ - 2005431 - Add STIG variant for GUI installations [rhel-8.4.0.z]
BZ - 2013553 - Rule package_rear_installed should not be applicable on s390x [rhel-8.4.0.z]

CVEs

(none)

References

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/index

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server - AUS 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server - AUS 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
s390x
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
s390x
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
s390x
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
s390x
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for Power, little endian 8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
ppc64le
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
ppc64le
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
ppc64le
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
ppc64le
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server - TUS 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server - TUS 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for ARM 64 8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
aarch64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
aarch64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
aarch64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
aarch64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
ppc64le
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
ppc64le
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
ppc64le
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4

SRPM
scap-security-guide-0.1.57-3.el8_4.src.rpm	SHA-256: 10cd8a5c62e5ab619e09fd49b8e27f5e3403430589dcfdc71e94b1e8773c9507
x86_64
scap-security-guide-0.1.57-3.el8_4.noarch.rpm	SHA-256: 63481b0bc70da6c0f25b91bab553d9b9d22ec69677cd227df83743d795e81521
scap-security-guide-doc-0.1.57-3.el8_4.noarch.rpm	SHA-256: aeacfa3fa6f91603e747490197dcd2e1dd214d4a3fa4cda1cf3b8b5f0e6f1a84

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.