Issued:

2013-11-20

Updated:

2013-11-20

RHBA-2013:1590 - openscap bug fix and enhancement update

Synopsis

openscap bug fix and enhancement update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated openscap packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6.

Description

The openscap packages provide OpenSCAP, which is a set of open source libraries for the integration of the Security Content Automation Protocol (SCAP). SCAP is a line of standards that provide a standard language for the expression of Computer Network Defense (CND) related information.

The openscap packages have been upgraded to upstream version 0.9.12, which provides a number of bug fixes and enhancements over the previous version. This update adds support for the National Institute of Standards and Technology's (NIST) SCAP 1.2 standard, so that all content, such as the following, is correctly supported: the Red Hat Enterprise Linux 5 Security Technical Implementation Guide (STIG), The United States Government Configuration Baseline (USGCB), and Red Hat Security Advisory content. (BZ#956763)

This update also fixes the following bug:

• Previously, the oscap utility did not properly handle the process of object evaluation while querying the RPM database (RPMDB). RPMDB iterators created upon the query were not correctly removed if the process was aborted, which led to RPMDB corruption. With this update, the created RPMDB iterators are now removed correctly and process abortion no longer causes RPMDB corruption. (BZ#999903)

Users of openscap are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

Affected Products

Updated Packages

• openscap-python-0.9.12-1.el6.x86_64.rpm
• openscap-debuginfo-0.9.12-1.el6.ppc64.rpm
• openscap-0.9.12-1.el6.s390x.rpm
• openscap-devel-0.9.12-1.el6.x86_64.rpm
• openscap-debuginfo-0.9.12-1.el6.x86_64.rpm
• openscap-utils-0.9.12-1.el6.x86_64.rpm
• openscap-devel-0.9.12-1.el6.s390x.rpm
• openscap-extra-probes-0.9.12-1.el6.s390x.rpm
• openscap-extra-probes-0.9.12-1.el6.x86_64.rpm
• openscap-0.9.12-1.el6.s390.rpm
• openscap-devel-0.9.12-1.el6.s390.rpm
• openscap-python-0.9.12-1.el6.i686.rpm
• openscap-0.9.12-1.el6.x86_64.rpm
• openscap-utils-0.9.12-1.el6.ppc64.rpm
• openscap-devel-0.9.12-1.el6.ppc.rpm
• openscap-debuginfo-0.9.12-1.el6.s390x.rpm
• openscap-0.9.12-1.el6.src.rpm
• openscap-0.9.12-1.el6.ppc64.rpm
• openscap-content-0.9.12-1.el6.noarch.rpm
• openscap-devel-0.9.12-1.el6.i686.rpm
• openscap-devel-0.9.12-1.el6.ppc64.rpm
• openscap-python-0.9.12-1.el6.ppc64.rpm
• openscap-0.9.12-1.el6.ppc.rpm
• openscap-debuginfo-0.9.12-1.el6.s390.rpm
• openscap-utils-0.9.12-1.el6.s390x.rpm
• openscap-debuginfo-0.9.12-1.el6.i686.rpm
• openscap-extra-probes-0.9.12-1.el6.ppc64.rpm
• openscap-0.9.12-1.el6.i686.rpm
• openscap-python-0.9.12-1.el6.s390x.rpm
• openscap-utils-0.9.12-1.el6.i686.rpm
• openscap-debuginfo-0.9.12-1.el6.ppc.rpm
• openscap-extra-probes-0.9.12-1.el6.i686.rpm

Fixes

• This content is not included.BZ - 860984
• This content is not included.BZ - 956763
• This content is not included.BZ - 999903

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.