RHBA-2021:4265 - Bug Fix Advisory

Topic

An update for scap-security-guide is now available for Red Hat Enterprise
Linux 8.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.5 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
• Red Hat Enterprise Linux Server - AUS 8.6 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux Server - TUS 8.6 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64

Fixes

• BZ - 1778929 - Password remembering must be made by means of pam_pwhistory
• BZ - 1843913 - Rule rpm_verify_permissions in CIS profile always fails
• BZ - 1856466 - RHEL 8 (including UBI) fails no_empty_passwords check.
• BZ - 1857179 - Some ansible remediation tasks are removing files even when not necessary
• BZ - 1859487 - Rule xccdf_org.ssgproject.content_rule_wireless_disable_interfaces has currently no remediation
• BZ - 1859551 - Rule xccdf_org.ssgproject.content_rule_sshd_limit_user_access description is incorrect
• BZ - 1876483 - OpenSCAP SSG remediation slows performance with individual rules in auditd
• BZ - 1920893 - CIS oscap rules concerning interactive usage should be marked as 'notapplicable' when run into a container
• BZ - 1946252 - Smartcards fail with STIG'd RH8.4 Beta
• BZ - 1955183 - Add ANSSI-BP-028 High level profile
• BZ - 1966577 - Rebase scap-security-guide in Red Hat Enterprise Linux 8.5 to latest upstream version
• BZ - 1970137 - Add STIG variant for GUI installations
• BZ - 1970481 - [Regression] Cannot accept Licence due to USB keyboard and mouse being blocked
• BZ - 1993056 - Update RHEL 8 STIG profile to V1R3
• BZ - 1993197 - CIS compliance profile does not represent structure of the policy
• BZ - 1999423 - [Regression] Cannot accept Licence due to USB keyboard and mouse being blocked (ISM profile)

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/index