ELBA-2023-5084

ELBA-2023-5084 - scap-security-guide bug fix update

Type:	BUG
Severity:	NA
Release Date:	2023-10-02

Description

[0.1.69-2.0.1]
- Fix bash and ansible for rule accounts_umask_interactive_users [Orabug: 35848632]

[0.1.69-2]
- Remove OpenSSH crypto policy hardening rules from STIG profile (RHBZ#2221697)
- Fix ANSSI High profile with secure boot (RHBZ#2221697)

[0.1.69-1]
- Rebase to a new upstream release 0.1.69 (RHBZ#2221697)
- Improve CIS benchmark rules related to auditing of kernel module related events (RHBZ#2209657)
- SSSD configuration files are now created with correct permissions whenever remediating SSSD related rules (RHBZ#2211511)
- add warning about migration of network configuration files when upgrading from RHEL 8 to RHEL 9 (RHBZ#2172555)
- Correct URL used to download CVE checks. (RHBZ#2223178)
- update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155790)
- Fixed excess quotes in journald configuration files (RHBZ#2193169)
- Change rules checking home directories to apply only to local users (RHBZ#2203791)
- Change rules checking password age to apply only to local users (RHBZ#2213958)
- Updated man page (RHBZ#2060028)

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	scap-security-guide-0.1.69-2.0.1.el9_2.src.rpm	2619d21a1d2b83a4842db2f4fa9a39d9	-	ol9_aarch64_appstream
	scap-security-guide-0.1.69-2.0.1.el9_2.noarch.rpm	75f5ede9daffc2f7358783bc7639fa42	-	ol9_aarch64_appstream
	scap-security-guide-doc-0.1.69-2.0.1.el9_2.noarch.rpm	bd8545f19ee18d77331d6c3a0435b368	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	scap-security-guide-0.1.69-2.0.1.el9_2.src.rpm	2619d21a1d2b83a4842db2f4fa9a39d9	-	ol9_x86_64_appstream
	scap-security-guide-0.1.69-2.0.1.el9_2.noarch.rpm	75f5ede9daffc2f7358783bc7639fa42	-	ol9_x86_64_appstream
	scap-security-guide-doc-0.1.69-2.0.1.el9_2.noarch.rpm	bd8545f19ee18d77331d6c3a0435b368	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team