diff --git a/.gitignore b/.gitignore index 777d757..ac85eaf 100644 --- a/.gitignore +++ b/.gitignore @@ -11,3 +11,4 @@ SOURCES/scap-security-guide-0.1.66.tar.bz2 /scap-security-guide-0.1.76.tar.bz2 /scap-security-guide-0.1.77.tar.bz2 /scap-security-guide-0.1.78.tar.bz2 +/scap-security-guide-0.1.79.tar.bz2 diff --git a/scap-security-guide.spec b/scap-security-guide.spec index 9e1be12..b46fc61 100644 --- a/scap-security-guide.spec +++ b/scap-security-guide.spec @@ -5,7 +5,7 @@ # global _default_patch_fuzz 2 # Normally shouldn't be needed as patches should apply cleanly Name: scap-security-guide -Version: 0.1.78 +Version: 0.1.79 Release: 1%{?dist} Summary: Security guidance and baselines in SCAP formats License: BSD-3-Clause @@ -124,6 +124,15 @@ ln -s ssg-firefox-ds.xml %{buildroot}%{_datadir}/xml/scap/ssg/content/ssg-firefo %endif %changelog +* Mon Dec 1 2025 Artem Denisov - 0.1.79-1 +- Rebase scap-security-guide to the latest upstream version 0.1.79 (RHEL-130249) +- Introduce configure_custom_crypto_policy_cis rule to restrict weak ciphers in RHEL CIS profiles (RHEL-111896) +- Cover configuration of maxseq parameter in pwquality in all CIS profiles (RHEL-128593) +- Add missing requirement to configure_custom_crypto_policy_cis rule (RHEL-76009) +- Enable sshd_disable_forwarding rule for RHEL8 (RHEL-76009) +- Fix idempotency of network_ipv6_privacy_extensions rule (RHEL-106813) +- Make enable_authselect rule not applicable in containers (RHEL-84439) + * Tue Sep 16 2025 Matthew Burket - 0.1.78-1 - Rebase scap-security-guide to the latest upstream version 0.1.78 (RHEL-111011) - Rule service_rngd_enabled is now evaluated on RHEL >= 8.4 in case kernel is not in FIPS mode (RHEL-95188) diff --git a/sources b/sources index af2e31e..1c20596 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ SHA512 (scap-security-guide-0.1.52-2.el7_9-rhel6.tar.bz2) = c12b1210a7829578d2b32c22950a9f93913ae4981efb31304aea04d43791eb86c75bb5cdc4ceb35741bcb00306db44a5734a03bd0578f1d255917d590e840260 SHA512 (scap-security-guide-0.1.73-1.el7_9-rhel7.tar.bz2) = 36321a8ba03bcdb41e592a8dfdd8126e7717effeab5fa65b56db1125d2b62bf79ed0940b819f1ea1e080d1960553b1f28e317e019b725147b980e07b96700860 -SHA512 (scap-security-guide-0.1.78.tar.bz2) = b84c549fe42799a6daffecf5720c5208f9946974f74193b9f6beb3fba04c35d9f073953c94b83c5ddf36855d59be1c66dafb011dde4427ab040dd1ec5048c063 +SHA512 (scap-security-guide-0.1.79.tar.bz2) = 57963e896aef6089523bb7165ece32dafeedc2caf0baac594c4d0d083ff00bd37c4fdc1c98357db1c70523bb67543c07b6a41b7d989ba1a8e97907218d954311