[El-errata] ELBA-2025-23191 Oracle Linux 8 scap-security-guide bug fix and enhancement update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Sat Dec 20 22:23:04 UTC 2025


Oracle Linux Bug Fix Advisory ELBA-2025-23191

http://linux.oracle.com/errata/ELBA-2025-23191.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
scap-security-guide-0.1.79-1.0.1.el8.noarch.rpm
scap-security-guide-doc-0.1.79-1.0.1.el8.noarch.rpm

aarch64:
scap-security-guide-0.1.79-1.0.1.el8.noarch.rpm
scap-security-guide-doc-0.1.79-1.0.1.el8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/scap-security-guide-0.1.79-1.0.1.el8.src.rpm



Description of changes:

[0.1.79-1.0.1]
- Update OL8 STIG to V2R6 [Orabug: 38759396]
- Update OL9 STIG to V1R3 [Orabug: 38759391]

[0.1.79.openela.1.0]
- Make OpenELA a derivative of RHEL

[0.1.79-1]
- Rebase scap-security-guide to the latest upstream version 0.1.79 (RHEL-130249)
- Introduce configure_custom_crypto_policy_cis rule to restrict weak ciphers in RHEL CIS profiles (RHEL-111896)
- Cover configuration of maxseq parameter in pwquality in all CIS profiles (RHEL-128593)
- Add missing requirement to configure_custom_crypto_policy_cis rule (RHEL-76009)
- Enable sshd_disable_forwarding rule for RHEL8 (RHEL-76009)
- Fix idempotency of network_ipv6_privacy_extensions rule (RHEL-106813)
- Make enable_authselect rule not applicable in containers (RHEL-84439)




More information about the El-errata mailing list