libopenscap_sce25-1.3.4-3.3.1 >
A _1p9|Y>9i8 V m""b.QB{$`aJ骇 pyHT_EYdDQvhkW:gvhwvEBx.Ӣ4vD,H~:]SrztlfȔ6lVep<
`=,}>xo( { *ω<0Bħk:2v( Ih&@H% OSŭ=$ Gaf36ff66901b552521505dd11c10a2cd11e49b9d e5eef72ed19ddf95d9885f54dd8c7321532a6c3d2160dc77e44d96c7a1ca4df8 h _1p9|>I#`۠ 8qiHWRWxc_N kp mRBX6dI}8Gkw(EwgH DP2* /"bGa-R{ +N{ 3;<`7eQmvyTOVQ ݞeiqq38wY l3] ⿄'č/*[ a\`t 1LI7U͊pO &&.e躚"!.+'ɷc.|f ḌR
>ѫ,݇OӷRD > p @ m ? m d L : @ H P T
X `
P D ( m 8 t + 9 + : + > jk @ jz F j G j H j I j X j Y j \ j ] j ^ k b k c k d lH e lM f lP l lR u ld v ll w l x m y m z m< mL mP mV m C libopenscap_sce25 1.3.4 3.3.1 Script Checking Engine Library for OpenSCAP This package contains the Script Checking Engine Library (SCE) for OpenSCAP. _0wsheep18 XSUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ System/Libraries https://www.open-scap.org/ linux x86_64 X _/_/ cec63fd16dc4747a889c0b08ea6646239a5f8443a6b83716d6cf7ed96802827f libopenscap_sce.so.25.3.0 root root root root openscap-1.3.4-3.3.1.src.rpm libopenscap_sce.so.25()(64bit) libopenscap_sce25 libopenscap_sce25(x86-64) @ @ @ @ @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.11)(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libopenscap.so.25()(64bit) libpcre.so.1()(64bit) libpthread.so.0()(64bit) libpthread.so.0(GLIBC_2.2.5)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 __/@_Q_w@^^{G^ @^^]:\@\[@[[ @[
@Z@Z1@Z1@ZZ@Z
Z
Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF
U#T@T}T|X@Ty@meissner@suse.com meissner@suse.com meissner@suse.com rfrohl@suse.com meissner@suse.com christophe@krop.fr meissner@suse.com meissner@suse.com meissner@suse.com rfrohl@suse.com rfrohl@suse.com bjorn.lie@gmail.com rfrohl@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com rbrown@suse.com meissner@suse.com meissner@suse.com meissner@suse.com jengelh@inai.de meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com meissner@suse.com ledest@gmail.com - 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval - openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE
Leap 15.1 and 15.2 - add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301) - openscap 1.3.4
* New features
- Add support for FreeBSD
- Make use of HTTP header content-encoding: gzip if available
- Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps
* Maintenance, bug fixes
- A lot of memory leaks have been plugged
- Refactored rpmverifyfile probe and fixed memory leak
- Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions
- Fixed DOM representation of the profile platform
- Test suit: better portability, more granularity in results, inclusion of memory-related tests
- Compatibility with uClibc
- Local and remote file system detection method was improved
- Make the report a valid HTML5 document - openscap 1.3.3. Notable improvements in this release:
- a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč);
- timezone for XCCDF TestResult start and end time (thank you, Jan Černý);
- new yamlfilecontent independent probe (draft implementation),
see the proposal https://github.com/OVAL-Community/OVAL/issues/91
for additional information.
There are other changes as well, here is the list:
- Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF;
- Added ability to generate `machineconfig` fix;
- Detect ambiguous scan target (utils/oscap-podman);
- Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory;
- The data system_info probe return for offline and online modes is consistent and actual;
- Prevent crashes when complicated regexes are executed in textfilecontent58 probe;
- Fixed #1512: Severity refinement lost in generated guide;
- Fixed #1453: Pointer lost in Swig API;
- Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities;
from system_info probe;
- Fixed filepath pattern matching in offline mode in textfilecontent58 probe;
- Fixed infinite recursion in systemdunitdependency probe;
- Fixed the case when CMake couldn't find libacl or xattr.h.
- dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream - Add upstream patch to fix the scap-workbench build:
* 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch - switch back to official release
- openscap 1.3.2
- the test suite and build scripts were improved to support Debian 10
- offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes;
- the oscap-docker wrapper is no longer dependent on Atomic
- Python binding are now more robust
- HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents
- Support of multi-check rules has been improved across the whole workflow
There are other changes as well, here is the list:
* New features
- Offline mode support for environmentvariable58 probe
- The oscap-docker wrapper is available without Atomic
+ Maintenance, bug fixes
- Improved support of multi-check rules (report, remediations, console output)
- Improved HTML report look and feel, including printed version
- Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels
- Probe rpmverifyfile uses and returns canonical paths
- Improved a11y of HTML reports and guides
- Fixes and improvements for SWIG Python bindings
- #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity)
- Fixed URL link mechanism for Red Hat Errata
- New STIG Viewer URI: public.cyber.mil
- Probe selinuxsecuritycontext would not check if SELinux is enabled
- Scanner would provide information about unsupported OVAL objects
- Added more tests for offline mode (probes, remediation)
- #528 fixed: Eval SCE script when /tmp is in mode noexec
- #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage - temporary openscap 1.3.1 git snapshot
- make it build with new RPM (bsc#1160720) - use distribution-release instead of dummy-release - openscap 1.3.1
- New features
- Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation)
- Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers
- Tailoring files are included in ARF result files
- OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line
- HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition`
- OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide
- Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2
- Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool
- Maintenance and bug fixes
for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1
- removed patches accepted upstream:
rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch
test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch - obsolete removed packages: openscap-engine-sce and openscap-extra-probes - Drop gconf2-devel BuildRequires: It is not mandatory, so lets
build without this obsolete package.
- Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires:
They are also optional, but not obsolete, and previously pulled
in via gconf2-devel dependency, so lets build support for them. - openscap-1.3.0
- New features
- Introduced a virtual '(all)' profile selecting all rules
- Verbose mode is a global option in all modules
- Added Microsoft Windows CPEs
- oscap-ssh can supply SSH options into an environment variable
- Maintenance
- Removed SEXP parser
- Added Fedora 30 CPE
- Fixed many Coverity defects (memory leaks etc.)
- SCE builds are enabled by default
- Moved many low-level functions out of public API
- Removed unused and dead code
- Updated manual pages
- Numerous small fixes
- xinetd_probe.patch: fix trailing whitespace in config
- test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test
- sysctl_unittest.patch: fix sysctl unit test
- rpmverifyfile_unittest.patch: fix rpmverifyfile unit test
- rpmverify_unittest.patch: fix rpmverify unit test
- openscap-xattr.patch: removed, included by upstream - openscap-xattr.patch: build against new libattr - scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible
to match both opensuse and sles or official suse_linux_enterprise_server
names at once. (bsc#1091040) - openscap-1.2.17
- New features
- HTML Guide user experience improvements
- New options in HTML report "Group By" menu
- oscap-ssh supports --oval-results (issue #863)
- Maintenance
- Support comparing state record elements with item
- Updated Bash completion
- Make Bash role headers consistent with --help output
- Fixed problems reported by Coverity (issue #909)
- Fixed CVE schema to support 4 to 7 digits CVEs
- Fix output of generated bash role missing fix message
- Fix oscap-docker to clean up temporary image (RHBZ #1454637)
- Fix Ansible remediations generation
- Add a newline between ids in xccdf info (issue #968)
- Fix unknown subtype handling in oval_subtype_parse (issue #986)
- Outsourced the pthreads feature check and setup
- Speed up in debug mode
- Refactored the Python handling in build scripts
- Prevent reading from host in offline mode (issue #1001)
- Many probes use OWN offline mode
- Improve offline mode logic in OVAL probes
- Do not use chroot in system_info probe
- Prevent a segfault in oscap_seterr on Solaris
- Out of tree build is possible
- Use chroot for RPM probes in offline mode
- PEP8 accepts lines up to 99 characters
- New configure parameter --with-oscap-temp-dir (issue #1016)
- Fixed OVAL record elements namespace and SEXP conversion
- Removed '\r' characters from help output (issue #1023)
- Full Python 3 compatibility
- Removed basic Python implementation of oval_probes.c
- Added support for Travis CI and Sonar Cloud
- Minor fixes inspired by Sonar Cloud
- Added Fedora 29 CPE
- New tests in upstream test suite (offline mode, Ansible, etc.) - openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0
(bsc#1091040) - Replace old $RPM_* shell vars. - replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan
helper tool for this. (bsc#1083115) - disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - openscap-productid-cvrf.patch: add a --productid selector
for "oscap cvrf" as upstream does not detect the system yet.
(might go away) - openscap-1.2.16
- New features
- oscap can generate output that is compatible with STIG Viewer.
- CVRF parsing and export has been implemented.
- oscap info command has been expanded.
- The AIX platform is supported.
- Many documentation improvements.
- Numerous other improvements of existing features.
- Maintenance
- Huge cross-platform improvements.
- Memory leaks fixed (RHBZ#1485876).
- SELinux fixes.
- Many coverity fixes.
- Numerous other bugfixes.
- buildrequire procps-devel - openscap-1.2.15 / 25-08-2017
- New features
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE
- Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings
- fixed missing header files
- fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777)
- refactoring
- documentation fixes and improvements - Remove line-trailing whitespace from last changelog entry.
- Rename %soname to %sover to better reflect its use.
- Replace unnecessary %__-type macro indirections. - openscap-1.2.14 / 21-03-2017
- New features
- Detailed information about ARF files in 'oscap info' (issue #664)
- XSLT template creating XCCDF files from OVAL files
- Generating remediation scripts from ARF
- Significant improvements of User Manual (issue #249, #513)
- HTML report UX improvements (issue #601, #620, #622, #655)
- Warnings are shown by default
- Verbose mode is available in 'xccdf remediate' module (issue #520)
- Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698)
- Support for Anaconda remediation in HTML report
- Maintenance
- Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038)
- Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700)
- Added a warning on non-existing XCCDF Benchmarks (issue #614)
- Fixed output on terminals with white background (RHBZ #1365911, issue #512)
- Error handling in oscap-vm (RHBZ #1391754)
- Fixed SCE stderr stalling (RHBZ #1420811)
- Fixed Android OVAL schema (issue #279)
- Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824)
- Fixes based on Coverity scan report (issue #581, #634, #681)
- Fixed duplicated error messages (issue #707)
- Fixed XCCDF score calculation (issue #617)
- Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312)
- Fixed failing DataStream build if "@" is in filepath
- Fixed missing header in result-oriented Ansible remediations
- Memory leak and resource leak fixes (issue #635, #636)
- New upstream tests
- Many minor fixes and improvements - openscap-1.2.13 / 05-01-2017
- Maintenance
- we always build system_info OVAL probe, fixed configure output accordingly
- warn when the user requests to generate an ARF from XCCDF 1.1
- fixed a segfault when loading an OVAL file with invalid family attribute
- added --thin-results CLI override to oscap xccdf eval
- added --without-syschar CLI override to oscap xccdf eval
- fixed a segfault when freeing xccdf_policy of the default profile
- removed ARF schematron workaround when there are no applicable checks
- fixed verbose output in oscap xccdf generate fix
- do not filter fix by applicability when generating remediations from results
- fixed memory leaks, resource leaks and other minor issues - openscap-1.2.12 / 21-11-2016
- New features
- separated stdout and stderr in SCE results and HTML report
- HTML reports contain [ref] links for rules and groups
- Maintenance
- fixed ARF errors reported by the SCAPval tool
- fixed CVE parsing (issue #550)
- fixed namespace of ARF vocabulary according to NIST SP800-126 errata
- fixed exporting OVAL Windows namespaces
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248)
- fixed oscap-docker man page (RHBZ #1387166)
- fixed memory leaks and resource leaks
- small fixes and refactoring, test suite fixes - openscap-1.2.11 / 14-10-2016
- New features
- huge speed-up of generating HTML reports and guides
- support remote datastream components (issue #526)
- support tailoring of external datastreams
- various attributes of remediation scripts are now shown in HTML report (issue #541)
- new option generating OVAL results without system characteristics
- remediation scripts in HTML report are now collapsed
- support for extracting Ansible playbooks
- enabled fetching remote resources in OVAL module
- added Wind River Linux CPE
- Maintenance
- updated jQuery and bootstrap libraries in HTML reports
- extended, improved and updated user manual
- fixed issues with proxy in oscap-docker (RHBZ #1351952)
- fixed a bug in OVAL arithmetic function
- fixed a segmentation fault (issue #529)
- fixed results of XCCDF rules with @role="unscored" (issue #525)
- fixed invalid characters in OVAL results (issue #468)
- fixed a segmentation fault in tailoring (RHBZ #1367896)
- updated SUSE 11 CPE
- fixed many memory issues
- large refactoring of datastream module
- new tests in upstream test suite
- various small fixes and improvements
- openscap-1.2.10 / 29-06-2016
- New features
- support --benchmark-id when running `oscap xccdf generate guide`
- added CPE support for OpenSUSE 42.1
- Maintenance
- oscap-docker fixed to be source compatible with both Python 2 and 3
- fixed offline mode in rpmverifypackage probe
- fixed scanning of non-RHEL containers in oscap-docker (issue #427)
- fixed regression in loading a datastream session (RHBZ #1250072)
- fixed missing SCE results in XCCDF reports (issue #394)
- fixed a segmentation fault (issue #370)
- fix error message when OVAL generator element is missing (issue #345)
- fixed failing rpminfo probe
- fixed compilation on RHEL5 (issue #393)
- new tests in upstream test suite
- test suite is able to run on Fedora 24
- fixed remediation scripts appearance in HTML guides (issue #460)
- fixed autoconf build
- small fixes, refactoring, small documentation improvements - openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/@time and version/@update in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore
- dropped fix-missing-include.dif, not needed anymore - enable the SCE (script checking engine)
packaged in "openscap-engine-sce" subpackage.
- enable the CCE (Common Configuration Enumeration) - openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes - openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions. - openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage - openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform - openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests - openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark's front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457) - openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes - openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes - openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed - openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes - fix bashism in oscap-scan.cron script
- add patches:
* openscap-1.1.0-fix-bashisms.patch /sbin/ldconfig /sbin/ldconfig sheep18 1609314423 1.3.4-3.3.1 1.3.4-3.3.1 libopenscap_sce.so.25 libopenscap_sce.so.25.3.0 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:17736/SUSE_SLE-15-SP2_Update/c8e9eed22c84ec00df6bdfbe83f3c4fc-openscap.SUSE_SLE-15-SP2_Update cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=89a7d6e6faceb241334c7e18cf2fa2b28ec43bfa, stripped P R R R R R R R R R
R R `w=L-#p: utf-8 a206d26b1965384a3e3889526492be2df3b36373df3b108e18ebbbf7f01ce505 ? 7zXZ
! t/>Q]
cr$x#7 9z6s5`oH,ܠ~`H(n7pERí*[5"n-7M;̆Tmi^ㅳ]`r &kRQ.u2tԅD"[f%\[Yژ+}xk0:"JN)w
0b䜢D
Ͽ =IT5^#}ilm4V/_0cAZ4&Jڅ5I a "#?
RH
"$_qWKp9zu49af/䎿.1Qyik Q&HV(R.5%P4N<{zRՉX&uC"#e]9淚tYQPY뿼ejYX@iO3ִ4
:X Bi/ݎQ4Xq4'I0@BwРM+qIb^Hlӑfk;2
T(mȋ7oM)"tBv
4|,,>v+cF;!f)&3hGK>B:Iy`E ]l7咫Ri͟<==V[5 '
gcM!V%g lO` : Sؿ>. pTz൧K;ku0\QOV>q8L^ 8|eB ´YFnSC!Gx`R\Nl@3҂NbKB@峱 BwM
:7 wҊU'Ӛ}XN#% )}V{ |&`枅"7* wt
Q]k6", !
lkQ FZn?྆#
0wWMWe^h!CiH,h3t܂ `,O6X"imىK$ X ILl~% !SE5w(Fv+HwъdI~7UtbקZk@ĊR¤j |lZH>CؕM|-|
\F(/%9kIwu4TCt } ⦧Ȭ!C\kFd
7
="N9~` ceK'1F֜KjQiJΔFAVdlglpF D⪯
;oj+2..!1J8Ri沵Vsóx{⍴0D
dq̝ՙ}'kb|e
@Oa}Y*aEHz|$6=[] ra#@4B5ea `t;hoj:@.̲ Yu%ml[]J9WE-5̳h[
x P7` d&[DUN&
J}q6lbn4Fgr]-,҅l}]ڽMN c>Q^z R.04P3 {=Y.bg"oЌzU5Ò CsP _:ur" $6=GJ 9Dd W2IN?>> oLULEy3[BDuG4P 3s <洇Σ
Uhi$b6
˖glPpJ|pO@Uz
@y/Cexb4.U< T+TL0< z`S}~!' z.KNӉz8~ ap,? օ:Һ=8U_ /R8L )qf>ԇ*L>1<:)BOY06٘-c -h >J늊7^T`qA4kGhX 8}|
F)5=c]Pf0/: >s]d[@h)09T Վ= Yxh$s2(Vg7t i4W"
-M[ 'SrO\oMߧxud; 1k/6=7ۻ Yuڧ9d? ҷu}< $Gyr;`Ljs`Ϸ# qĸ~hDi#ta#^#Ev 0SbyF97$ sw%qO1Y=c "j ٥9 )Ph>0x~BTSKm)l
x:Pʥ-Wblpaiy{w@ZiYbsJcRO*EaGr"Z%aϑ8GGW^[T f7QĖF+Zb?#QgI5E vT,#쾄1ξIWpaǎٻ3ĔYj, Z? '^:%z>80>ῸL{}mpG%MY1=gK<M!%VKGtVzPA6zKjXh< B.9VAʻ}m3[܀w1/h+ fvP7K*kZ{lQخr 2'-ª 1njpA&4 lx\ޘZiAE3d(tMcN' NZ'GDž4}ϕBK`YfF>:~\_! q
D\9A7Rߗfݳ(egB4tR)S{'ũKu
s`Eeݜ-%T+qpmA@@krsc (Ѩ#p
{F|1RcgM VO }&X G/pBdXeDA+C* Ή>;K_T>ܬ0ߛUp`J߷KDl
NhU7TBXCDF7 v _x*@ mĥ $[#*h'0]by(NUUyR pg@_&ǯy͟u4kZﰭdvwo
E%אneGcKZkCQ|^OOXAJ|+Z0`TN ς)?Q
i?sSkƮ 2Ru}Vc)sXcOQ ?[l}H ȜC/d6cu]ª' n~ i9J&=M7Gpqb
sʹs<Ayhr3N@yr ͮgYcΎ5ʇoBMs@xitL u2W!.˻f }& D*tF > CWOnG}oZ R+_^3<ҋ od x'Ƭ>Ln1+.J'麻
{Q A?!>1D?Nmb9 <:?d\[j砠gEHaf ^DWJL{ȚG#ֽV @5tti h܌uωY3()l+AHAۡhJi T=$m{R%\4
Yp༕<Ʉq`N)z I#-a\+"-TLJjjX^S>ѢDώ1/Z0<T4ǿɖc*@N6jzο&'̽lA8uY#&Yy Zm .ۻjb (Fts ?T7vE1eM)KEoJP[eI2ʷ R AO~ρ{DƑ_^I߫!!ؾ$OχxJil|k H躆UW UHz^x Lj%y:MxjUL:`:_cbSXXHgi鱐[(d[d/(h4q'Ub5Wu[Ewa*ƺ.ka>F8rWݠ 7 2+J)̄oYո 1T
PTN-m:诠|'m/ĻN<2E,8[dMU-E"a|{9/9m8i":*$ToGSĄٓM#M)N,*
PF~:ׅG1'6xi^k)![HCķK=*IkW'; Lş'wDwW&3/ 13tD|Jᑭz|F2^>6?Flmؒ~Ŀ+'5V @
:x ܻĶQ*5Qe/U~giGRj` 6"DC!Cp EhUf S\ hYfy|&/˰tzݗBQ{ۥԮI0t͘ Fwiљ9txc搚ʰ0E@BrUB_ofa OUJ5P-g;t[6ɐ}J%jk~ N[(Xk\j'ɯ/9nk%m|K V: 4"WvzAa R=A\0dM"Dk]cγR H՝!⯆yULRLL*ܓP896
0#ljNHs!ZQyV1pi &RD3+뒍x?pBă# t*tDv:0Z(7gjop=lF\/Өth>PlI BݯӦ48̠IĞ~m6`$(:QQ vM {kl tg6-EP^xힰ ҤOUFHoi(3iPV6>dS5 Bt:}{Ȇ#VĂ !5
`Lu%! mhiGr\?)1ra N ^݆`{Hٟfޒ)eO/asmFzG4ڨ`YZ.Y #ihlƭuoGB5DC K/*
vUϩ:N) a}8[i|x*j2FECU=Wv=bEAI2YAms&wvt Y`=4re+L9{{V]碂)pE)ʤ6 դt(jM
ԫ2i)Tp$:T)FI5AѼTD%vd!8AhOuʴ9^/XϪ wzkYZv`FoPV"AyW[$%_ӹ?ǸEKD_cQ/dyR+5jC|_ 3(UMq : u^ kw.3L#o,m
-@Oo`5(gw%g
'Y}65%>pgHsMv^-doyR`>i
a9y%' 4WR 1Ӥ 7WbHV3 fdj(D:(h
!1#ڮE;rNI%,SuDCQӄdog\vs Ύɥ 䠐+sn_v73ߧ{zJ}h1З8Iyo~țv دʥt=
S~4
M}lJn
J 4#" pmGk5ShWV~1
}uVʬDheu8.`mIh
u86.Rڈ1Cg}K 5(@v(yDl4f|Q$[ hRe|9zZ-^8C
* ǒq- - ~,K |Լ5ϵ\c)JvxcKԓ/v]B6f 0! eBY-U҅s&##W`j%jEv}5jAYJX裎)4Z {vQO|Vߏѧ,q·+k
b@K -~cdpEאn
G s ]5k$±)!\H Y]qH1 z
XV)*R. c;./Wx|?/Ow32KR&Esh'zF3k]o_n YUurM՜zx 5QHtnKڜQ`Uz2>K4 V=Ov h,Ĥ)ISs=n6y~MKBb1u .4_яϐ ȠYǂ7l0CYZ2þrye
u/
~8Fy:q爣)=r>9bPdߛZ?QO5E9'@,9 %Uy?yhڿ&I oZ$ۍwn-aS u^5/lշj ^
]n$C}w0HVv3|t
?7_T^ND
ajSB=+>$_,?MOJZbX@e⊓7F qIFC ۵γyqĕD7M?*ȍ@ g?ۗ zMzt.qz!D C zp垷Ժ{375+wc߱2*%ִƁ^vG\N3*khڂUC\)pqyH (8_bv?<8w)!Lg'Dۓ@t[N5&3RUɓx&;('( mJgHټр| DD[ڎ#1QGHOM=<&sԹzu
]s_ Vgɑ؏?C[v6 ! b_aLA\jcVo;}8Eo mDn!(#9CZQ>{k5# jf6lybTJ,07[ ǔ e'X+n%?nJ}Tӌ ,#>.}=:
m!6 Q_dkૼUa_wr ƹ[˽vMUe~ ,Qmr_l^kކ`+S8=Fj PQklN*- l01*52D#Q+PU}0!Fndߖ%fCIsYƆUŔ!&Q~ڻdEC?XbKʤW1cϗF[L7MGicql-e(9e_1lCo8 V%KO[s p9z>QeS|>t/C(~(3rerNay/'3 ԏlKm9yG(o("xEB~2[] v ٸt{_):TT@t bm,|vѿzjq3Lb$rJLv/{穔^k:ۖ3aoUI
1/du=N CQzώH^p;a9V(Wh#f9#P8y~~^d~AA]ۤ;s gZ7ۡ E pk {(=8[ ! !3q|;Cρ4bV< N4Mw`/UpXCxL g?.>m[nJk,Eb(蜟l3 91K1l{NS.Ӧ^B"$N^8#tѲ;'wҡ߂K^" nKJ _9 Mp_+o3#b;հmNg %>NĬ4>cfSVYU!w ey,#+Ӑe4As_ ,֪}Zf
wGb{,&&ůp2XD XDuW
jwV /:7-"~ړC <Xm,Ǻ?j CU:
Ԩ mT[Dȅ6f ^qKG$e%S~B&hi;1p\g
Z35XdϐڟB1
.Q "VlD,l23aٵeNa]nO0?(,gk4 4癨ꤼM\xU|IΒOh(6O|\G[{稃ݹ@'Zkr:[Jv[eҰ&Y~{ÒDH ӯ2;¶"1p{zJ&nOzhxn3IҔSx-O臨FwI~6 |D ڼ M k(> 8?Hh(31 he
ߦfyOY .Xo3"ąk
Jj|4C1pD[t|v Ѿi9%&=}Gu!|6ӉQl i4 wOY]t*?U
* :OE9WH9+ !+9һl,FQ EV5±lg]dx:Rvo8g*5 l) $cJ#ZᅚL [(4\qa>%P=pxT@9dף'Ni/>7oE0J"ŵX$ _mh^`#uP%gFηoPn Ӯ͝eۿ6ܲtJ:텸ToH3 K+#*3x\m
MZ.8]"7!fB^Lw );t7Dy ''w`W,Uz3+[l$ItTg\3D\TD9=[e!1=PUo3[QBBYOc^!Y $sSuvÒwCgԆ40BW0u LDHIY<-}h3R~ln@ (w7;У <[~Etxnj ojs 1@1ԇmIXT ][ V담us Muԧz;6n %c6zp!hj1#]"Htm̧j{$ ?+=Y\wÓr{u/P#l@8HdXthoj
-;uJN})
6_Dᤪ* Dy0x$3UD1w+_F'uZQemEb yrq } }2 P)Mm7뢰Z g>vـ/9^uwǫ#bR0Wr
P* wWk`Bp&IM]LБe`ΌQ"mDEn& /HbrzE2l3v(Rϛ5m'ZToX1
{cOJ U
NXXtFBt@(8Л1{}'|d\ܬ Lǃe SIbl9BàDB|xTżuAmI Q]96,U!5ܩ-ϓ$s+jp셗R
WGU`a'` Z;on3.ef e ElT4 U7xjm7Vz)~ \mQ!]i뀗/tJ(>a!s U7? $BJjO^H}1㱞 15=@9jI|vëx#z sbHCIGB(L\0Dك1_Z֍XpiMsTmb!mO*ihP g=C WƄ u
X6Oɨ{Bj'
XO#m!%D@eUV ~1s K#4էfzi<
y ȑ$+w'la0tq$|5 ^iEApfʺE&cqgxgVVDJ7Px%%Q3l#cQŃ58Js8_F _IDx2Jq[ֶEŵj cm̐kCt" Mc!-E:sBn{[_-J!G'X.Z 0 Oѽ"qFFCNQ&1'i?Q5ءsف'dd!X(A" `v"FR S)p %q$MfMlp蹳 C
=@n$t "qOݶ ϡsP6cPN.8F˴"G*v1"^\/"x ˴/-K`eZR ^H8aG,w_g uXXU}~-vi/|`6K/~N֤Liʆf`3_)\ ܃(+v>`NqJ ږ ? gѦȮ~ط^7Z%eqlvL`O'sR!݈ ]:¢ `Ĺ7iNH~.ƞ!@X25IkRJrAt; ڀxGqt$ W" XZ[.^g/耧s c., 4l
s8t#^oiKO"|؛ <*
uY0 1#mI)c Hd]+_vGOq {g WVBuT5εJt4^٢It; רTj/kƶg|3V-eUY3
= ꐯ$whșH8)f~ʫ0֒ )iG ibe o 4^33=S؆t ᡡoFAG0< >)dI!uRuE f{vg'\$ws+Bmi>E|303"taDs
?-j}͎úr\ι7,Do kJ]$s-%ԌNlVqe ֍AVF>Vw
&$ {C8? v#Q*ܷD rh M2|FHGG_1$gr@Ŭ/L<|͋!By[gOFܯ`fOweCg^ yt?1;w3OGӪ*{N> מ99B=cV]yQ3լvR6~b;2^ZBR R8Hjlk!~]š OU x؉ տ6W.{mf<5e}VlRqyU+~WNPT ^8MN6]ڒ6*%'⇉
ZqW ym6pUWrX̙ [(* # EˏiS(W:"lU;blp.q4Z"Ս>4#J2,6% c#8 ثL$[Mb
D /;/%s0M1Yฐ+x4tS i#<9b;9+bJ;&Q-5G6rd`nehS h^sg-K䩏
l#Б8H77z䮶`
;R/IG 5W|Z'4p$-WeQq,`aQSǖֳD ,io-\)ʋ'ٳyH`ol v%\x)c[هI%Z\[;]wlGck*,tc)PeGh?_X! =.exg SZ^ga1Ҁ S?0+t7alj $u X} ,A=6dCJtQ }
0
YZ