RHBA-2022:6239 - Bug Fix Advisory

Topic

An update for scap-security-guide is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Description

The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol (SCAP) format and constitutes a catalog of practical hardening advice, linked to government requirements where applicable. The project bridges the gap between generalized policy requirements and specific implementation guidelines.

Bug Fix(es) and Enhancement(s):

• Rebase SSG to the latest upstream version in RHEL 8.7 (BZ#2116348)
• Update RHEL8 DISA STIG profile to V1R7 (BZ#2116409)
• openscap cis_server_level1 benchmark list mount option requirement for /var/tmp but does not require separate /var/tmp (BZ#2117511)
• Update content in alignment to CIS RHEL8 Benchmark v2.0.0 (BZ#2118976)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
• Red Hat Enterprise Linux Server - AUS 8.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

• BZ - 2116348 - Rebase SSG to the latest upstream version in RHEL 8.7 [rhel-8.4.0.z]
• BZ - 2116409 - Update RHEL8 DISA STIG profile to V1R7 [rhel-8.4.0.z]
• BZ - 2117307 - The new enable_authselect SCAP rule needs some tweaking [rhel-8.4.0.z]
• BZ - 2117511 - openscap cis_server_level1 benchmark list mount option requirement for /var/tmp but does not require separate /var/tmp [rhel-8.4.0.z]
• BZ - 2118976 - Update content in alignment to CIS RHEL8 Benchmark v2.0.0 [rhel-8.4.0.z]

CVEs

(none)

References

(none)