libopenscap_sce25-debuginfo-1.3.4-lp152.2.3.1 4>$  Ap_Nm/=„5/vn| Yu䥂:h*翟z/ݰ(xiI|#dۮEW-ȱl}xoFM++, [Be Z9xZci]~~=l'뷅eYg (vXBW-@T>n)/y]0ܳ Zҹ^0 J~7VڧlT0F$a*i,hн C"9=FLp>p@p?p" . ^ $7@R k}    P  4\(8+9h+: G+FkGkHkIkXkYl\lP]lp^mbmcnBdnenfnlnunvowoxoypzpppp5pHpLpRplibopenscap_sce25-debuginfo1.3.4lp152.2.3.1Debug information for package libopenscap_sce25This package provides debug information for package libopenscap_sce25. Debug information is useful when developing applications that use this package or when debugging this package._NDlamb67zopenSUSE Leap 15.2openSUSELGPL-2.1-or-laterhttp://bugs.opensuse.orgDevelopment/Debughttps://www.open-scap.org/linuxx86_642_zAAAAA큤_NC_ND_ND_ND_ND_M_M_M2b77cbf52489f7b0e1e5fa974b6ab8fbfeeb91c9c1cebb3390cc1ad55c84880d../../../../../usr/lib64/libopenscap_sce.so.25.3.0../../../../../usr/lib/debug/usr/lib64/libopenscap_sce.so.25.3.0-1.3.4-lp152.2.3.1.x86_64.debugrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootopenscap-1.3.4-lp152.2.3.1.src.rpmdebuginfo(build-id)libopenscap_sce25-debuginfolibopenscap_sce25-debuginfo(x86-64)    openscap-debuginfo(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)1.3.4-lp152.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1__/@_Q_w@^^{G^@^^]:\@\[@[[@[ @Z@Z1@Z1@ZZ@Z Z Y@X@XXoX2XW@V@V%@V`.V@Vf@UmUUF U#T@T}T|X@Ty@Marcus Meissner Marcus Meissner Marcus Meissner Robert Frohl Marcus Meissner Christophe Giboudeaux Marcus Meissner Marcus Meissner Marcus Meissner Robert Frohl Robert Frohl Bjørn Lie Robert Frohl meissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.comrbrown@suse.commeissner@suse.commeissner@suse.commeissner@suse.comjengelh@inai.demeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.commeissner@suse.comLed - 0001-Fix-memory-allocation.patch: fixed a crash during oscap oval eval- openscap-leap-cpe-15.12.patch: add CPE dict entries for openSUSE Leap 15.1 and 15.2- add dbus-1-devel buildrequires to enable systemd tests (bsc#1178301)- openscap 1.3.4 * New features - Add support for FreeBSD - Make use of HTTP header content-encoding: gzip if available - Improved yamlfilecontent: updated yaml-filter, extend the schema and probe to be able to work with a set of values in maps * Maintenance, bug fixes - A lot of memory leaks have been plugged - Refactored rpmverifyfile probe and fixed memory leak - Fixed SEGFAULT caused by recursive and circular dependencies between OVAL definitions - Fixed DOM representation of the profile platform - Test suit: better portability, more granularity in results, inclusion of memory-related tests - Compatibility with uClibc - Local and remote file system detection method was improved - Make the report a valid HTML5 document- openscap 1.3.3. Notable improvements in this release: - a Python script that can be used for CLI tailoring (autotailor) (thank you, Matěj Týč); - timezone for XCCDF TestResult start and end time (thank you, Jan Černý); - new yamlfilecontent independent probe (draft implementation), see the proposal https://github.com/OVAL-Community/OVAL/issues/91 for additional information. There are other changes as well, here is the list: - Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF; - Added ability to generate `machineconfig` fix; - Detect ambiguous scan target (utils/oscap-podman); - Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory; - The data system_info probe return for offline and online modes is consistent and actual; - Prevent crashes when complicated regexes are executed in textfilecontent58 probe; - Fixed #1512: Severity refinement lost in generated guide; - Fixed #1453: Pointer lost in Swig API; - Evaluation Characteristics of the XCCDF report are now consistent with OVAL entities; from system_info probe; - Fixed filepath pattern matching in offline mode in textfilecontent58 probe; - Fixed infinite recursion in systemdunitdependency probe; - Fixed the case when CMake couldn't find libacl or xattr.h. - dropped 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch: upstream- Add upstream patch to fix the scap-workbench build: * 0001-Do-not-use-C-keyword-operator-as-a-function-paramete.patch- switch back to official release - openscap 1.3.2 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage- temporary openscap 1.3.1 git snapshot - make it build with new RPM (bsc#1160720)- use distribution-release instead of dummy-release- openscap 1.3.1 - New features - Support for SCAP 1.3 Source Datastreams (evaluating, XML schemas, validation) - Introduced `oscap-podman` -- a tool for SCAP evaluation of Podman images and containers - Tailoring files are included in ARF result files - OVAL details are always shown in HTML report, users do not have to provide `--oval-results` on command line - HTML report displays OVAL test details also for OVAL tests included from other OVAL definitions using `extend_definition` - OVAL test IDs are shown in HTML report - Rule IDs are shown in HTML guide - Added `block_size` in Linux `partition_state` defined in OVAL 5.11.2 - Added `oscap_wrapper` that can be used to comfortably execute custom compiled oscap tool - Maintenance and bug fixes for a complete list please see https://github.com/OpenSCAP/openscap/releases/tag/1.3.1 - removed patches accepted upstream: rpmverifyfile_unittest.patch rpmverify_unittest.patch sysctl_unittest.patch test_probes_rpmverifypackage-disable-epoch-test.patch xinetd_probe.patch- obsolete removed packages: openscap-engine-sce and openscap-extra-probes- Drop gconf2-devel BuildRequires: It is not mandatory, so lets build without this obsolete package. - Add pkgconfig(glib-2.0) and pkgconfig(gobject-2.0) BuildRequires: They are also optional, but not obsolete, and previously pulled in via gconf2-devel dependency, so lets build support for them.- openscap-1.3.0 - New features - Introduced a virtual '(all)' profile selecting all rules - Verbose mode is a global option in all modules - Added Microsoft Windows CPEs - oscap-ssh can supply SSH options into an environment variable - Maintenance - Removed SEXP parser - Added Fedora 30 CPE - Fixed many Coverity defects (memory leaks etc.) - SCE builds are enabled by default - Moved many low-level functions out of public API - Removed unused and dead code - Updated manual pages - Numerous small fixes - xinetd_probe.patch: fix trailing whitespace in config - test_probes_rpmverifypackage-disable-epoch-test.patch: fix rpmverifypackage unit test - sysctl_unittest.patch: fix sysctl unit test - rpmverifyfile_unittest.patch: fix rpmverifyfile unit test - rpmverify_unittest.patch: fix rpmverify unit test - openscap-xattr.patch: removed, included by upstream- openscap-xattr.patch: build against new libattr- scap-yast2sec-xccdf.xml: remove platform cpe match, as it is impossible to match both opensuse and sles or official suse_linux_enterprise_server names at once. (bsc#1091040)- openscap-1.2.17 - New features - HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility - Removed basic Python implementation of oval_probes.c - Added support for Travis CI and Sonar Cloud - Minor fixes inspired by Sonar Cloud - Added Fedora 29 CPE - New tests in upstream test suite (offline mode, Ansible, etc.)- openscap-new-suse.patch: handle SLE15 and openSUSE Leap 42.3 and 15.0 (bsc#1091040)- Replace old $RPM_* shell vars.- replace oscap-scan.init by oscap-scan.service, add a /usr/bin/oscap-scan helper tool for this. (bsc#1083115)- disable scap-as-rpm binary to avoid python2 dependency. (bsc#1082135)- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- openscap-productid-cvrf.patch: add a --productid selector for "oscap cvrf" as upstream does not detect the system yet. (might go away)- openscap-1.2.16 - New features - oscap can generate output that is compatible with STIG Viewer. - CVRF parsing and export has been implemented. - oscap info command has been expanded. - The AIX platform is supported. - Many documentation improvements. - Numerous other improvements of existing features. - Maintenance - Huge cross-platform improvements. - Memory leaks fixed (RHBZ#1485876). - SELinux fixes. - Many coverity fixes. - Numerous other bugfixes. - buildrequire procps-devel- openscap-1.2.15 / 25-08-2017 - New features - short profile names can be used instead of long IDs - new option --rule allows to evaluate only a single rule - new option --fix-type in "oscap xccdf generate fix" allows choosing remediation script type without typing long URL - "oscap info" shows profile titles - OVAL details in HTML report are easier to read - HTML report is smaller because unselected rules are removed - HTML report supports NIST 800-171 and CJIS - remediation scripts contain headers with useful information - remediation scripts report progress when they run - basic support for Oracle Linux (CPEs, runlevels) - remediation scripts can be generated from datastreams that contain multiple XCCDF benchmarks (issue #772) - basic support for OVAL 5.11.2 (only schemas, no features) - enabled offline RPM database in rpminfo probe (issue #778) - added Fedora 28 CPE - Maintenance - fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed behavior of sysctl probe to be consistent with sysctl tool - fixed generating remediation scripts (issue #723, #773) - severity of tailored rules is not discarded (issue #739) - fixed errors in RPM probes initialization - oscap-docker shows all warnings reported by oscap (issue #713) - small improvements in verbose mode - standard C operations are used instead of custom OpenSCAP operations - fixed compiler warnings - fixed missing header files - fixed resource leaks (issue #715) - fixed pkgconfig file (RHBZ #1414777) - refactoring - documentation fixes and improvements- Remove line-trailing whitespace from last changelog entry. - Rename %soname to %sover to better reflect its use. - Replace unnecessary %__-type macro indirections.- openscap-1.2.14 / 21-03-2017 - New features - Detailed information about ARF files in 'oscap info' (issue #664) - XSLT template creating XCCDF files from OVAL files - Generating remediation scripts from ARF - Significant improvements of User Manual (issue #249, #513) - HTML report UX improvements (issue #601, #620, #622, #655) - Warnings are shown by default - Verbose mode is available in 'xccdf remediate' module (issue #520) - Added Fedora 26, Fedora 27 and OpenSUSE 42.2 CPEs (issue #698) - Support for Anaconda remediation in HTML report - Maintenance - Fixed CPE dictionary to identify RHEVH as RHEL7 (RHBZ #1420038) - Fixed systemd probes crashes inside containers (RHBZ #1431186, issue #700) - Added a warning on non-existing XCCDF Benchmarks (issue #614) - Fixed output on terminals with white background (RHBZ #1365911, issue #512) - Error handling in oscap-vm (RHBZ #1391754) - Fixed SCE stderr stalling (RHBZ #1420811) - Fixed Android OVAL schema (issue #279) - Fixed absolute filepath parsing in OVAL (RHBZ #1312831, #1312824) - Fixes based on Coverity scan report (issue #581, #634, #681) - Fixed duplicated error messages (issue #707) - Fixed XCCDF score calculation (issue #617) - Fixed segmentation faults in RPM probes (RHBZ #1414303, #1414312) - Fixed failing DataStream build if "@" is in filepath - Fixed missing header in result-oriented Ansible remediations - Memory leak and resource leak fixes (issue #635, #636) - New upstream tests - Many minor fixes and improvements- openscap-1.2.13 / 05-01-2017 - Maintenance - we always build system_info OVAL probe, fixed configure output accordingly - warn when the user requests to generate an ARF from XCCDF 1.1 - fixed a segfault when loading an OVAL file with invalid family attribute - added --thin-results CLI override to oscap xccdf eval - added --without-syschar CLI override to oscap xccdf eval - fixed a segfault when freeing xccdf_policy of the default profile - removed ARF schematron workaround when there are no applicable checks - fixed verbose output in oscap xccdf generate fix - do not filter fix by applicability when generating remediations from results - fixed memory leaks, resource leaks and other minor issues- openscap-1.2.12 / 21-11-2016 - New features - separated stdout and stderr in SCE results and HTML report - HTML reports contain [ref] links for rules and groups - Maintenance - fixed ARF errors reported by the SCAPval tool - fixed CVE parsing (issue #550) - fixed namespace of ARF vocabulary according to NIST SP800-126 errata - fixed exporting OVAL Windows namespaces - fixed injecting xccdf:check-content-ref references in ARF results - fixed oscap-docker incompliance reporting (issue #475, RHBZ #1387248) - fixed oscap-docker man page (RHBZ #1387166) - fixed memory leaks and resource leaks - small fixes and refactoring, test suite fixes- openscap-1.2.11 / 14-10-2016 - New features - huge speed-up of generating HTML reports and guides - support remote datastream components (issue #526) - support tailoring of external datastreams - various attributes of remediation scripts are now shown in HTML report (issue #541) - new option generating OVAL results without system characteristics - remediation scripts in HTML report are now collapsed - support for extracting Ansible playbooks - enabled fetching remote resources in OVAL module - added Wind River Linux CPE - Maintenance - updated jQuery and bootstrap libraries in HTML reports - extended, improved and updated user manual - fixed issues with proxy in oscap-docker (RHBZ #1351952) - fixed a bug in OVAL arithmetic function - fixed a segmentation fault (issue #529) - fixed results of XCCDF rules with @role="unscored" (issue #525) - fixed invalid characters in OVAL results (issue #468) - fixed a segmentation fault in tailoring (RHBZ #1367896) - updated SUSE 11 CPE - fixed many memory issues - large refactoring of datastream module - new tests in upstream test suite - various small fixes and improvements - openscap-1.2.10 / 29-06-2016 - New features - support --benchmark-id when running `oscap xccdf generate guide` - added CPE support for OpenSUSE 42.1 - Maintenance - oscap-docker fixed to be source compatible with both Python 2 and 3 - fixed offline mode in rpmverifypackage probe - fixed scanning of non-RHEL containers in oscap-docker (issue #427) - fixed regression in loading a datastream session (RHBZ #1250072) - fixed missing SCE results in XCCDF reports (issue #394) - fixed a segmentation fault (issue #370) - fix error message when OVAL generator element is missing (issue #345) - fixed failing rpminfo probe - fixed compilation on RHEL5 (issue #393) - new tests in upstream test suite - test suite is able to run on Fedora 24 - fixed remediation scripts appearance in HTML guides (issue #460) - fixed autoconf build - small fixes, refactoring, small documentation improvements- openscap 1.2.9 release - New features - oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths - enabled offline scanning in many probes - support for SCE in data streams - many improvements of verbose mode - verbose messages can be written on stderr - runlevel probe supports SUSE systems - new upstream tests - Maintenance - a lot of refactoring - fixes in various tests - OCILs are correctly placed in datastreams (issue #364) - oscap-vm can work with fusermount when guestunmount is not available - fixed oscap-docker HTTP communication issues (issue #304) - fixed oscap-docker tracebacks (issue #303, #317) - fixed container mounting in oscap-docker (issue #329) - added Fedora 25 CPE - only non-empty profiles are built (rhbz#1256879, rhbz#1302230) - fixed compiler errors on RHEL5 and SLES11 - fixed sorting of groups in HTML report (issue #342) - fixed version/@time and version/@update in XCCDF Benchmark - fixed CPE definitions to work also in offline mode - fixed sysctl probe (issue #258) - fixed manual page for oscap-ssh (rhbz#1299969) - updated user manuals and manual pages - updated .gitignore - dropped fix-missing-include.dif, not needed anymore- enable the SCE (script checking engine) packaged in "openscap-engine-sce" subpackage. - enable the CCE (Common Configuration Enumeration)- openscap 1.2.8 release - Maintenance - textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757) - fixed oscap-docker - small improvements in verbose mode - oscap info module shows information about tailoring files - fixed build with CCE (issue #264) - fixed XCCDF score computation (issue #272) - fixed segmentation fault in variable probe (issue #277) - fixed broken support for OVAL directives - fixed bash completion - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - new tests - refactoring in datastream module - many small bugfixes and typo fixes- openscap 1.2.7 release - New features - OVAL 5.11.1 fully supported - oscap-vm - tool for offline scanning of virtual machines - verbose mode - added SLED, SLES and OpenSUSE CPE names - show profile description in HTML report and guide - group rules by PCI DSS identifier in HTML report - preliminary support for Ansible Playbooks within xccdf:fix - added "How to contribute" and "Versioning" documents - Maintenance - using bziped RHSA documents in oscap-docker - fixed errors of sysctl probe - fixed skip-valid option (issue #203) - fixed segmentation faults in SCE content reporting (issue #231) - fixed tracebacks of scap-as-rpm - fixed invalid memory reads in rpmverifyfile probe (issue #212) - updated README and user manual - many small bugfixes and new tests - openscap-new-inventory.patch: upstreamed - fix-missing-include.dif: refreshed, 1 hunk upstream- openscap-new-inventory.patch: find out the CPE ids of SUSE Linux Enterprise and openSUSE versions.- openscap 1.2.6 release - New features - introduced OpenSCAP user manual - improved OVAL 5.11.1 support - added OVAL 5.11.1 XSD schemas and schematrons - support for core/platform schema versions - support for check_existence attribute in state entities - support for CIM datetime format - amended behavior of mask attribute - added support for remote .xml.bz2 files (use with --fetch-remote-resources) - rewrote oscap-docker to python, deeper integration with Atomic Host - introduced CPE name for Fedora 24 to the internal dictionary - HTML report & guide - results can be grouped by according to various aspects - printing supported (interactive elements are now hidden when printing) - table of content now shows only selected items (rule & groups) - references to RHSA are presented as links to website (rhbz#1243808) - Maintenance - scap-as-rpm can now build source rpm packages (srpms) (trac#469) - scap-as-rpm now supports python3 - refactored oval processing into oval_session structure - many smaller bugfixes and new tests - new openscap-docker subpackage- openscap-1.2.5 update - maintenance - smaller bugfixes - plugged memory leaks - fixed fresh static analysis (coverity) findings - fixed shellcheck warnings - fixes for Solaris platform- openscap-1.2.4 update - new features - OVAL 5.11 support 99.8% completed! - new symlink probe introduced - new process58 test capabilities - added possible_value support for external variables - added possible_restriction support for external variables - improved IP address comparisons - Added Scientific Linux CPEs - Added oscap-docker tool - Created man-page for oscap-ssh - HTML changes - improved visibility of selected XCCDF profile in guides and reports - render rule-result/message contents in reports - maintenance - Tests now pass on ppc64 little endian arch (rhbz#1215220) - partition probe now supports remount, bind and move mount options - Patched NIST OVAL-5.11 schemas to be backward compatible with OVAL-5.10 (rhbz#1220262) - fixed scap-as-rpm to work with vintage python (2.6) - better error reporting when a probe dies (i.e. due to OOM killer) - dropped selinux policy from upstream (rhbz#1209969) - fix segfault on invalid selectors (rhbz#1220944) - solaris support patches: file-system zones, systeminfo improvements - many smaller fixes and new tests- openscap-1.2.3 update - new features - oscap-ssh -- handy utility to run remote scan over ssh - glob_to_regexp OVAL function added - HTML changes - show rationale elements - show fixtext elements - show Benchmark's front-matter, description and notices - show warnings for Groups and Rules - improved handling of multiple fixes within a single Rule - scroll evaluation characteristic if they overflow - maintenance - OVAL 5.11 schema fixes - Coverity and memory leak fixes - skip transient files when traversing /proc (trac#457)- openscap-1.2.2 update - new features - OVAL 5.11 support turned on by default - included OVAL 5.11 schematron rules - DataStream can now contain OVAL 5.11 - `oscap ds sds-compose` now supports --skip-valid parameter - HTML report changes - Notably increased level of OVAL details - Table of contents is now generated for HTML guides - maitenance - rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting - solaris build fixes - xccdf:fix/instance processing fixes - improved (none) epoch processing in rpm probe - environmentvariable58 now emits warning messages when appropriate - offline mode improvements - other bugfixes- openscap-1.2.1 update - API changes - 5.11 schemas updated (from RC1 to gold) - oscap_source_new_from_memory can take bzip2ed content - HTML report changes - severity bar is now reversed (left-to-right) - maintenance - rhbz#1165139 - fix probe cancelation - dozen of bugfixes- openscap-1.2.0 update - new features - native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2') - improved performance on huge XML documents, especially DataStreams - minimized use of temp files to absolute minimum - added OVAL-5.11 release candidate schemas - API changes - overall 50 new symbols added to public API - introduced oscap_source abstraction for input files - further info: http://isimluk.livejournal.com/4859.html - all the parsers converted to use oscap_source abstraction - introduced ds_sds_session, high level API for playing with Source DataStreams - introduced cpe_session, abstraction to approach multiple CPE resources - introduced ds_rds_session, high level API for playing with Result DataStreams (ARF files) - deprecated dozens of API calls dependent on filepath - introduced API for waivers (xccdf:override) and modification of ARF - initial support for waivers in HTML Report - dozens of small improvements - maintenance - dozens of small fixes - dozens of memory leaks (whole test suite is now leak free) - updated gnulib - openscap-1.1.0-fix-bashisms.patch: upstreamed- openscap-1.1.1 update - Hint towards `oscap info` when profile is not found in oscap tool - HTML report changes: - Source OVAL results from ARF if available - Highlight notchecked rules, treat them as rules that need attention - HTML guide changes: - Variable Substitution improvements - Show benchmark title - Show info about selected profile - Avoid cdf12:notice, show only its contents - bugfixes: - improved handling of fqdn in XCCDF - memory leaks - static analysis fixes- fix bashism in oscap-scan.cron script - add patches: * openscap-1.1.0-fix-bashisms.patchlamb67 1609453124f4730314819832c03a4f5d6441281cbae87d6eb71.3.4-lp152.2.3.11.3.4-lp152.2.3.1debug.build-idf4730314819832c03a4f5d6441281cbae87d6eb7730314819832c03a4f5d6441281cbae87d6eb7.debugusrlib64libopenscap_sce.so.25.3.0-1.3.4-lp152.2.3.1.x86_64.debug/usr/lib//usr/lib/debug//usr/lib/debug/.build-id//usr/lib/debug/.build-id/f4//usr/lib/debug/usr//usr/lib/debug/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:15449/openSUSE_Leap_15.2_Update/e80289c9cc6090261fbf3960635ed7fb-openscap.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f4730314819832c03a4f5d6441281cbae87d6eb7, with debug_info, not strippedP3;Ҥ,txX=\'.openscap-debugsource(x86-64)1.3.4-lp152.2.3.1utf-894275da23c42e202a7cd1813b5ed86c6d50f6eff83a7221186d42babd11259cf?7zXZ !t/onO] crt:bLL ׻/o=g⹝:n^xsA$k`q&rzs}e(3q\ښj;]hr(yO b_8*+4J PQhnU$O22OD1P[{he(_fX ֱ-,|nS0 Y)!!_rq)XYT5FdhMN(9rнxng 3`K5  p<[?4vENCZ ߼A4IN. R{d2GaP<ʗh ;{Zi Bq1P/Y[U2g1r.LvDsA%pTMS,Frht!Z۲' (Aq̧U 3c3AAC F:|WdX6,=pfz%šhhnouKϝ8!Z"Go*Cmݫ&kWhѳgδr˗t@(25NN-ջUCN>ٝH1ƝcT]}T2IP8,idϹb<{U'< _5߬H'Ov$ɢ] A )^1x.$);ٞ%V߈͔2[nˌYlRYGwV ʿr9G|NE;c6N'"6Ij)ȋ-U^+Q`HUrg7]2slvzYnx7x)B}xWG 3K3/̪<rQo==%'渕=br}Fwl@yS8> ״ e*mqcn9wg؈djNwoNSHjTD]}a(Ev`RIx rpOP R#@4y RKd+MˉcGY6鰇{DS]>ߓ+|^r>`:AF~޼ccD VJuI폃џ$??\oQ 6*bBͱWUE.ҽ>.nYtQpxäP)@91#빿w/F8(I%}d8'ՍIcoML6,1K:>hÎ{^;}#"fP\<-ʷ So|Rj^/cn1Qa6?IA/rvWd`vVʉjs4{SHmUnERr:KlE}rVXgm:ᡐ {a!j-f̲pt=]áU `QQ-~8Ӻ%a4C)g4Nd sgl8ݰy tz5Ы Gefjyx_9ߍ ?k0y6K6\b ,fΙŬQ߂C_ICȦ#׃@vczQNo^l^UG:/LK~xt8=԰sQD[Z Idf հ'ddqr& `*2O$T~f`[,rď$Zc=,DJY vϻDf)pG] Dl]O0bm[X h(U+IW4ExܷIo6ͺ^O>Hg{Yjd%Ďb?,;u0=cz6$XQ6d־&_?5ou)8EtM /wLIgR:߹lcApCBYbJ* Wh>rD.\EjJYhZ̴%t e{kedCԭa1Kejтc":+!|:̖h) L4V5l.K1s89čڹ֮; Z۠]tSt4 w^u&Jk/Q#m@{JKJ ]_c盠Ctbt+څ`X{q܉<~S\n4cVIz$̛zWu.z #v#PŰHݵ y3]z6#0% ǟpSI"N-L樝<=GoE{{): k 5]RK]Ko%'+SȠ*>DY Աyig,trRNcծٓ&>!5[:·Xa>c{oD0|+hfȱ l XDu :8_^}F'aZ=i|Sև%A!`Qfr>aF"/jN~]r 4爥8Fc\^~vHT VA1x."5Bc-p|CE.1!.!D-ߕIǁsB $\qGҢ EBW;g;A0,ImL5 ng\D]Ŋ"f_пKi{f*qa; uxIA6s,d(tC_&(rZ"⹖x4eg[qnE4aV];m@#R{B挺^mUL t *񗮫En^!}eōKNINВ>9yA^H`/T"jpּ.F 8B4cԥ*z _u@tQ:Y 9-D[! @vEȩ=d)DŽJyq1.(Z7Ks<["T" KX*]˙ ["yc߱;F yD;/nacI$UQfzO]$gQRxΞQ3q&%U4nJ6xWە Vl'Jr[i| =*~<RfSaxf2C=!ۭQa$gK2>Q%HAuzAYYڿ,*2-){:tY(9n[d7^;&%: rJ*/]Pʍ tloFDH9qKH M |E4aKyF.N!g?֥ tj׻&oX h,Fz tVgjݖ2#LGk0Y-]\} -PepD= z'[y9Oݩ]{'AF f׍HDy{/4A5)ia!6 Fpע[:{8AUr45< + Oڶ lfv`2 6aʥ6q Ӯ E< ;R2 (^ |1ilrdc@/@O`\(/~߳*wĸ :`c^-5t-߰U˫3McÆ s>T(U_,,N_Κ悔Pn\:̠6]+|R:3=cQrE`#u$8nGPQC9rkX61o~xmtXvwJ)gXЮ+kT ">6KӟWw'_,i 7V@A*mx怪44#m~|_bDU2m4KZTM) g=ƨRQhX; nu k֋s\4Rdf1yyi4paq*pG@(2m} tCFoy%-4c FR4^عOox#އU&atzx7ʃXK%}Cm;T:Y= JEaw`zFX)P8&dK҂r]ܭ]L672*Dq&FTK{wZ%$p{&yg]5~ʐّ' 4Az4cb֋_eܔ]Y8x`6gED1j#: e%#]H(K'.Pha^[MR RŋUے> -"dp!襪8ޛdŏnl7◳~X08KxrH[UQTѼOĹNR j$uR5@azӵ' Ȉw[qpj_IʜmmAQ-3=CiF XoVhm'x t08"$#΁SVmM7V3V~a)贍 'Xhb!"CE?}Rvg Kykn=lw/$Ș'Be],3iG\Aǻq}P#!ڮqϭ}kYKk.fy->0t)m` y;*Y%$ 9Q{NѦpKynRi @HO!R$?GԠjjo s7uS{k:5=AZKb@b3×#2 $tiUI(CMQхHUPy:ႦdGK_0_bwjA֡l_>vx8o_ Z+%bʀ-_d{OM#}:75 ctQV#dPu)>,<*&0;'"B<&>}0D2~jk)0PM*< ^+s\ CSMD('[#yUO&&KF1GQPV>5(( !1A//iUQ-YuFEVN%`8: #Ccb(_AP+$kS7Nj>Z{t-fӈ~ RRtb6nJkWYr*wLRW0. e([.OuKԻxmuƯxŀ e)E~[@o] NVtőEVw6>ۡ?]0ȕڊs;iQD3d[TI%k~ז! 5\{z.>Z"|π۴by{/&)0ď5Ez[:'U$:O*OG!v U:#(WЄ? [dW4aEdu E J1gg&կSPS V@#vVoGtaim{Asc59*ӧ"Z}€prX)ʋs+$H+q G?G =/Gwa$E'L Ł"^Lit$#iJ[] ^+*H /+c"kwF~ ; c5dS*?,{?LJ8):H<ћA\R6xd{Dj JA"v'-k5 5yLM?.%$);ajͩߝ2 7|̄Xh.9,z jjto.qGGdkGGZcgg{O{=]% \քQ|$CkB73X1P$1 Ӑ |0 .*ȖO_Ϟ f{]?FǂY,ܑ%~K/{|J?Fd2$o NFgm\@TC[xhLʆԃ󼠨ex-rMO "#|p*L$#nTe=%}[UeC?ŕE)bV9NԈvPU2joLJ$۔+kBib[D `k8ͫ×E *MӨ*NykyYR6FdG G96 c--C;c&Ⱥ;i[t)>±J۠oEÔRj=?y9ES:˼ZnGY*"+[g/dgOӶ^C-Uے'E*X?\]"ώ;'GXpYr}B5Q-1ݯt;M9̨ ~]grn54=:ad#,IO!jL Fe_K Q$vqt*꿾^ ?ѕAZ9l. H2Ȗ߽ӄtv4`Ix}hbX #lIƆh.#hh­a7q $ѻCsGa+ۂ*[ }OLtjh(ibF(bz)Ԑ]p{}.U"rAz(4GpH >i:efN,tHcqFWЏ l~mͅ А8){`Uݴ9/Ohb|8;䏛]d_zpX8%"4͠k]"ƉBQCG'sUm>X@J=O1ⷞ9[nQ`gl 1*.An+]T{Bl W0~C }@ZyWBxS-|d>]/4Ղ^۰(.=j5j#Q ):ػqY +mPdeb IUH_=%pj(ѭעupk[I]ܠ7tT7KLSbS ٯ8BSB$š,2? $N\ۅ1PQ=\U38%$=y!/mܛĔV<2Dwazb*, KfbŎo+ .Py Đv$M^JtS*6!ŕEpEYGyP8BqZ]gC^N+^jNϋZau&eZ|$VrU}`I8*p+U= WDM?l,q]8R%gbZe8) pb65ٙ+*&ҵX\kB{DkF;x\$_h)IlbPA}A꼍xTw{8CAmH^p4};*D e16ڒD\*WV摭+5"2z?^,Bw&]R

!Ǥ/ƀcP` :4_v(R0a6|U4xrR2W˘?K;*={fy^ x0 m83/هFYB~(UߡP%.p%ϵ׀Da(Ov{2J Q2AY{whK-ngjKR8? I԰]GSfc -_ݮ((&MLmWnbE߀mxd8Iޜ?/ga*SHPұU)UcX&U,- }7*-_cѫ 暂@ Gx$#5fc}ǹ" AiHM|tS{.:p/RJD`Je0d/84*GʢF>ڶ{vrGc\gLP"\HpG-gR#lkswRPC]yӒe,Daܩ ]ݥ|0FlrexA@3VpŇJR_47't)%pA;V82i^d1}M,ҙ%8=Gk:"dr~Atv̸S98Wh`ysw9HYh_s|`E'؏524ΩaTSM1!/~uӰN#5QDW5ݫX<ك:zͨ#B#޻HHM;tֽdój9Z@"~+)]{OV~W?ԗ1{n=SXt4D"HyA\ȕF|yq-9ߜW:n !k/Go!Xˣr%s߂[6{(fJߚ{z/hwHxA9 LT a{AxE^J5.73ww#ܖ`})񒐭Zq.hl;#NlErde8Zm,12O} eyPWa5Kb˲Ka".pmgpߨ>`CM{ NtlӶdl+&5I-C =g9SẸVf%-$Rw5RFZ42ǣeL 8;#+5 _C!&j[fVc/Økjo ?]XmOp㚒rNz*L9禶ėÂcΣ_ڪ6=Wn4 , 3#E`nq:gBpQNAm3U9zbį%pp&pGֶ,;l* հ-g9$fQAEwSEZEBm<}. xEb34 ]BpvtiO8MȻ=OyGEIvK5L37 *xщrz˅sӈQle'fbE0d<>ڜ`7!&&,OJ5C~W@LY)7k$ a})PV6~ZAE׭PYUGiH93Bsw>á8 Q2i/!!ΝbrOI2%totqg#ٰ.5'jv}xd!4,9BdIf+ XY:0N$I?u5B5=,Qr}x"̶H28Pz*4*WGu-r!v鍐w^3k{ tG}4 !,;x )I$unק;u '_㡈QX*+@=e!UHAK[ƹ5weh4"N l2ԞCE !BȀY L/o-i`ؔul*8c 8%1jXC/ExpС2u(#miKED[f.d ۞~0A[>,TutqOir~#;Xz \VLt0nb;b:Pcg0l)Vvr/j` 9wI kEE<"_F= pH,+3õg_6ᢩKX /ɐ KW$|-g$1䄭!A) ܛ$C )wtlY(?.^;M$ؔq{ǒd_5fD E"Bjg;VmžY[^dY\Ad*I+< zPn:E2PB'Of)Vs@m{-ԧ[CAS3v(}\mD|g+k1n o/{ >䤤x*-zvR<{p/<u^ jګM۟B^nhO=1p=+HT^$SҖ@[DK" $-Ib hN=hcu-/Jf^R(xI`r+W%Hilk2ҕ`Ń.VP|: |i3 !˨iݿSɄeBJ^kR^{u"mD\FBFRB*u819"t%zXocH~61! ,[N: l+,u`%vwfsgz-VP$1QjO er5bxD.:5JPfߊr_a.9Hcg%搉#v^QC)j>?K:o[䑢KlPLmWa[-̽y]HCe9T~r*'ֆ"B FmiG""wg Zu#OH;gUsG;6a}hG<85ũȬ5:wBi*㾊!h癲 /oĕO4VVk; Ҵ"{3:vr?&ڨǷv)"{ Fٍ{0dWhN/k =+DYb$pJr|$XL7{уB )m@nTe (/Ǒ_`neMGv$830#\;{1' F?,.L3Yts4IBmR.yo^q}7gc}Q{ SYbrQx8t3f;6_)?]nHoQ UtJ~K6M pyMX=TL`$rMY'4 40U.PI^dG=1AKܰq+BQѪ.1Dza÷R9ѧdFݫ/|]rc@lkqpJ.ܳoNgn3GN`lS|B P7yat|88lZ|)|jlNȊ9>tta,% ̘`(ޙqi ].XZ66Bܡ!E`0GZw}:|:}(O|ҥ}28pn?!f3z 5^z7s{(S#I_X(Y[ԩ@xTTÖ>#)v"1Z|rۛ}'suv"1ujsc}0^? gC2%̑b 04} ,jtΕν*prO>z&mnMRdN2"t$`Mzㄭ5?v PQp$ͼ9n㖏P: }벯S?!C|#1e_uAy驿/rc%|`B]6#5hEajU.'o=+|*?(Nܰnu@XV/}\J%%@#JM>Z|ͻ &rFn?%ɥ9=Х-ʦnFNWU7,bJK QЗ"'0mNNՈkq[u ''J6x({,89(?8^ʞ0eh,ij;7KZBVnD/vr ULs<2Av|^@y!/ëUՋzubl0ܨg0ݔ pcB} .^Q==aFYTK#Vg==P.t@xogSD>aLrmY.}E/% `oqIބ傫hymK&:PUhj f7bp|3"I/GY] [4 resvUfټmt˨[xKKrWA0Z_ 㮖a7ؕCfoP.-y̗߮{7;>a(f'ZamHRD@m!:s-i(>S|N(`|sYAz2 mKz 0S'˓5pkn]`|Vr΢8hCX4DK8}f8euٟ۪ FL 9=3f<0J'> X3}荚H!`=7q8?}?yߞj^Q앢$ j(Hm>\h|rEZ̰yR}\~i5"AijK&mсJ)#ne8;h^؀z/*rJW?'W I?]> Ey"L^N[|/T%ސ΢ rkX=S~L@4h ~QhVa&,rBZkѸ#ɫ&, @}"k/ddS\Eޘ9x3]Rm1K:u;h@Y# WMrP)5ۦ+VI8\o3 蠯/F@egRUᙘƵ(NRKS@ ;(i3+%ڌ~p LB?GZf&~y)렶!So䓕1=r6'/F{ 6~ r.(?fa%쨢7]ADvR(]k5H|ځ1f:3Vp_ht\=1xf岺s-oƩD ]DG*.=^KqDZB["\.n/dlFUO0/fb~f'\)2\4gTr).iC1B2da=ss>aM qI;-SQ7 >yÛGN:yD+b2ױGBOAG]>Ylǒ%1vqt_dz @J*x6}GbR b2!$L'3t}ϫ )ty}_@lE]^9EJߝFlF F05[s4 *H%M0NNrZm$ԡɎzNϘx= ƻJF%A= 1~R|6*?,f*rbPjY0nxG~:nw:i[61dEˁRgܬ-&@S,) -HGdjIj=!zc|aѧSsT(^ IN)BY $g]S9,\r ] DTS%'x 0ќKA~y8AѵWb 3 3T4lD2ݻbf^U2z;KgNc=w&1R-G2ݶ.rޛL@PˤRnP#p*Y2G wsL>. <ˍknbR6Ow"~KcBL!o>$V=LZ,-.뢘+2LoIj̧,үB8h` ȹ7Y'PmY-séyިo[. _SrjI7+|gx]5Gt`K-YL+s!:h GP%p"*[j%N/2Ef:z[P~(vWɥO81xƄW~ӑ;.H5eVs[ѰlݍR0 Zd2B5v4^c-g Vbzˠ誈=븍z Gt( {xw쎍/] }0$C*)Ϸ#kѱ'xӲbƌ(GJqG/vʻ89H@U@.?Vm}F7RLvXɷ]QZ1]TI8bϏ.wG04fv#¶B ]~?Xpd{+2xgc9Zȭ5 sAl-pi'X/r~+Y'h?6B.YAKWsc: Ey;ZU8la՚r0Xm%[B>ΐ攏Ii?a QfA6Gxa|]lngg0N:$ͼn (Hz)[-[^~= @ܚW5r*7qغL"Qݾ;1` %?T)aHlۈ$i1{].80" *jPU'n\=M$#Y vEUC7[ïC[\Դuyꄪ8N"gӖXҨ5ѹⰖ7Qsr5I Gǂ+ڄDTj*,؋+-RdjEuDm ӣmil }K0{[Fha@/L!c檙?WKYaÔh6{[%'K}հ'!-hg"p{@ ep qiA<2VLT8&D 9CV"p~oU$􍪋٧yO+Q-? ½>)s .Gx#|qcơqE-izDWOv/fw_ f1ptP,yK܉:W eM~qAkc&»ӬV^C<mɐL!^6j:), J7_Di6Mѡ$q(R5P)%lը3گz{;C!ogr ymGBbrasC^zg\$Yφ{.p+j  _faԁ,F|Wk_?6Eù3_G+Y/HKqx)b{⑦q-@$?{YBAC1f6k@UL-a'L|^3YIW!d(|jn1G{uY:8˭$/ O[əsȰ]b7Y q1)=RPfjdA !1bl9+&G /@ǁU?sUXpߤi!$z|# 5AÚQ 5NF=]tPnv {"TZ[+OwxA b_1Bn5OVcC(d lU?2Cˌ4Qu`-V^R|EY cHX<֊Á&폸]K"DsU7 Μ|jYKSfצ;V ʨ}4_J#Hu8m$X$rस<! ׅ'@ ƛ .fIoeuo]Dd;;#k{G7;`As~H}*n60yÉ'ӪsX<#>̔^u)^܅4 `31˴^L'U@+I "T?M䶱nڏ~v,;ߧL%(墡n_*ޮT+aw+j&R,'O.,|eWt8p2I-H]{)|fÅ^es9rʫLZWwlRYXU Mq*5"a"QGP ~=qzW\$xFAX kicRYlk'HӂTHEzl2KAx ͸ji\[(/؄m JlOgYM膎bGW=(*['3.ԻEq s f |VZAb}A$}- xsȦLzaQgB2H^6eO,+ b4925y=qZY*k}<&^߭" S!;9!C y/sQ-Xz<´6c6$a\ȘaƧ !Vq석کj[r8Nv8权 h5lp'\$dF Tg1ʝufVVf7/~h_/-~ĩXC;;<7QLsD8z|v9hQT m /Nȁ~Aɏ" 3e\u.{p֙s@X#2LbZ]sgsϔms|*/QN`pn+Pᑪb"E _R°i0 k]@#i 2)vv'2IK\ʹU4h JoJ%8=A]l2Ek %g^̹ ]m\A޲~Ek4R2){EIlM@:@W %LյAI$)7V`Žxl-l* !% J_\`A{utPf<^SrSpt]`PtbNb4u'永2 Qc@="m;مԧ0sdgՒ 3a \I*Nϝi9*gn.PGQ#i,NFrJ]r&egG0|l-J]}tLNvG.@4/>܅:Na'k"=)LNg . r[*3pd6r4aܟ.7E@ ׃77Uxӎ `:ݺA:B1|,{ia=3SLon5}az:-jP,U0w;f Q2Rҳϩ0=,C1ODf.54qg{gE4a?὜iCy.dbrO׎Cm93{n2ecQ)9ZdA'sڻ6 !ٟ4_/dZѿG~P1G*hLT.O+#'Ƶ,@C! hOV-덕GwY`=C9LC~u!{0E_ìye^V89\e)%ދ.Z+C3;_wC V=5æh]B`# !gc3;rFTR/3x5d9T&̰G Cz)H~Rܽ+T _{}XC_ϕj'6O9ˮ5ѧqӵsx0_eD+HAuN ٙ'[MẔs‘eD,IIohbjK gBCipبDoGr~)ӁDa)uQk@j+&i>r.TQ?~B^^l0猷尉yk#vy !4 , F@]փW Dpcu_%B͐s܎Bk''BTpP G3oe~Se[*:Xg|6K9xg(4%T;x@G1Ï&B8X JKaM*E. ?3et]끕{C>ҮXaI姮(mcƞȦuͅQ9cS.qLeG<;J&9/)xs/*zݻ6?&~j%v gtA6 b/8N0ޓ 6s$|gek?G;gT  [<(R4db!3GהGUG,GS6m8"*uo 3IK.p# s8g|wK\יf3m-'W)|`Z:pؠNՎy }7LgԾH3#@)MCD@U%J$@Vt%0d Bs-W܂NJQV8/13Lkw>!jCC]?2l)nRf@1jq+8zlFed p|r~F^G宰lnjfW%2\m:?]㔰R*}K*7"b/nF qvށ0Q."S L=*$6﹭/1rQ a}^WɺeGFޯH*AH.ʊD"(tW._:LWӺꁲkߞ닛rl:xڛIchn0x9 <;m b|pw^#%bq? Si[  YZ