Issued:

2011-05-19

Updated:

2011-05-19

RHBA-2011:0609 - openscap bug fix and enhancement update

Synopsis

openscap bug fix and enhancement update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated openscap packages that fix various bugs and add several enhancements are now available for Red Hat Enterprise Linux 6.

Description

The Security Content Automation Protocol (SCAP) is a line of standards that provide a standard language for the expression of Computer Network Defense related information. OpenSCAP is a set of open source libraries for the integration of SCAP.

The openscap packages have been upgraded to upstream version 0.7.1, which provides a number of bug fixes and enhancements over the previous version. The most important changes include support for Open Vulnerability and Assessment Language (OVAL) version 5.6, the new OpenSCAP API, and various memory and CPU optimizations. (BZ#642672)

As well, this update fixes the following bug:

• Previously, sending the "USR1" signal to all probes in order to abort the execution of a current rule could cause the oscap utility to stop responding or even terminate unexpectedly with a segmentation fault. This update adapts the underlying source code to prevent such behavior, and when the "USR1" signal is received, the oscap utility now correctly aborts the execution of the selected rule and continues with the remaining rules as expected. (BZ#669693)

All users of openscap are advised to upgrade to these updated packages, which fix this and other bugs, and add these enhancements.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• openscap-content-0.7.1-1.el6.x86_64.rpm
• openscap-0.7.1-1.el6.s390x.rpm
• openscap-python-0.7.1-1.el6.ppc64.rpm
• openscap-0.7.1-1.el6.ppc64.rpm
• openscap-perl-0.7.1-1.el6.ppc64.rpm
• openscap-debuginfo-0.7.1-1.el6.ppc64.rpm
• openscap-utils-0.7.1-1.el6.ppc64.rpm
• openscap-content-0.7.1-1.el6.s390x.rpm
• openscap-devel-0.7.1-1.el6.s390.rpm
• openscap-perl-0.7.1-1.el6.s390x.rpm
• openscap-debuginfo-0.7.1-1.el6.s390x.rpm
• openscap-utils-0.7.1-1.el6.i686.rpm
• openscap-devel-0.7.1-1.el6.i686.rpm
• openscap-debuginfo-0.7.1-1.el6.i686.rpm
• openscap-python-0.7.1-1.el6.s390x.rpm
• openscap-devel-0.7.1-1.el6.s390x.rpm
• openscap-0.7.1-1.el6.s390.rpm
• openscap-0.7.1-1.el6.i686.rpm
• openscap-python-0.7.1-1.el6.i686.rpm
• openscap-debuginfo-0.7.1-1.el6.s390.rpm
• openscap-0.7.1-1.el6.ppc.rpm
• openscap-0.7.1-1.el6.src.rpm
• openscap-utils-0.7.1-1.el6.s390x.rpm
• openscap-devel-0.7.1-1.el6.ppc64.rpm
• openscap-content-0.7.1-1.el6.i686.rpm
• openscap-debuginfo-0.7.1-1.el6.ppc.rpm
• openscap-0.7.1-1.el6.x86_64.rpm
• openscap-perl-0.7.1-1.el6.x86_64.rpm
• openscap-devel-0.7.1-1.el6.x86_64.rpm
• openscap-devel-0.7.1-1.el6.ppc.rpm
• openscap-perl-0.7.1-1.el6.i686.rpm
• openscap-python-0.7.1-1.el6.x86_64.rpm
• openscap-content-0.7.1-1.el6.ppc64.rpm
• openscap-utils-0.7.1-1.el6.x86_64.rpm
• openscap-debuginfo-0.7.1-1.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 642672
• This content is not included.BZ - 669693

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.