RHBA-2021:4780 - Bug Fix Advisory

Topic

An update for openscap is now available for Red Hat Enterprise Linux 7.

Description

The OpenSCAP suite enables integration of the Security Content Automation
Protocol (SCAP) line of standards. The openscap packages provide the
OpenSCAP library and the oscap utility that provides various SCAP
capabilities.

Bug Fix(es) and Enhancement(s):

• Report shows "pass" while command output shows "fail" items (BZ#1858502)
• Memory leaks in probe_file (BZ#1861793)
• oscap dies with segfault when using --stig-viewer option and latest XML

file from DoD (BZ#1911999)

• probe_file consumes all the RAM of the system (128GB) (BZ#1932833)
• Ansible playbooks for profiles have duplicate variable definitions

(BZ#1944683)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1858502 - Report shows "pass" while command output shows "fail" items
• BZ - 1861793 - Memory leaks in probe_file
• BZ - 1911999 - oscap dies with segfault when using --stig-viewer option and latest XML file from DoD
• BZ - 1932833 - probe_file consumes all the RAM of the system (128GB)
• BZ - 1944683 - Ansible playbooks for profiles have duplicate variable definitions

CVEs

(none)

References

(none)