As of Jun 30, 2024, the Red Hat Enterprise Linux 7 maintenance support 2 phase ends and Red Hat will no longer update compliance content for RHEL 7.
Many policy providers, such as CIS and DISA, will no longer update their policies once maintenance ends.
The RHEL 7 scap-security-guide package will no longer be updated.
You can continue to use the content provided after Jun 30, 2024.
The content is mature, stable, and still suitable for use by Extended Update Support customers after the end of maintenance, however as mentioned before there are no updates planned.
The Center for Internet Security and Defense Information Systems Agency will no longer publish updates to their RHEL 7 profiles.
CIS stated that version 4.0.0 will be the final release of their RHEL 7 benchmark.
DISA typically ends support of a STIG after the maintenance phase ends, which can be expected in the case of the RHEL 7 STIG. If you plan on upgrading as a result of the end of this support phase, RHEL 8 and RHEL 9 each have a STIG, with automation available for both.
This automation can be run with Red Hat Insights, Ansible, Satellite, all of this automation is powered by OpenSCAP. Red Hat has the resources, tools, and consulting offerings you need to keep your systems running and keep up with the latest benefits that Red Hat Enterprise Linux has to offer.
The Red Hat Enterprise Linux upgrade page has those upgrade resources and more.
This Cyber News was published on www.redhat.com. Publication date: Sun, 14 Apr 2024 06:13:05 +0000