- New features

- HTML Guide user experience improvements
    - New options in HTML report "Group By" menu
    - oscap-ssh supports --oval-results (issue #863)
  - Maintenance
    - Support comparing state record elements with item
    - Updated Bash completion
    - Make Bash role headers consistent with --help output
    - Fixed problems reported by Coverity (issue #909)
    - Fixed CVE schema to support 4 to 7 digits CVEs
    - Fix output of generated bash role missing fix message
    - Fix oscap-docker to clean up temporary image (RHBZ #1454637)
    - Fix Ansible remediations generation
    - Add a newline between ids in xccdf info (issue #968)
    - Fix unknown subtype handling in oval_subtype_parse (issue #986)
    - Outsourced the pthreads feature check and setup
    - Speed up in debug mode
    - Refactored the Python handling in build scripts
    - Prevent reading from host in offline mode (issue #1001)
    - Many probes use OWN offline mode
    - Improve offline mode logic in OVAL probes
    - Do not use chroot in system_info probe
    - Prevent a segfault in oscap_seterr on Solaris
    - Out of tree build is possible
    - Use chroot for RPM probes in offline mode
    - PEP8 accepts lines up to 99 characters
    - New configure parameter --with-oscap-temp-dir (issue #1016)
    - Fixed OVAL record elements namespace and SEXP conversion
    - Removed '\r' characters from help output (issue #1023)
    - Full Python 3 compatibility

OBS-URL: https://build.opensuse.org/package/show/security/openscap?expand=0&rev=215
This commit is contained in:
Marcus Meissner 2018-06-07 09:03:58 +00:00 committed by Git OBS Bridge
parent 4db5e7cc47
commit 01a370031b
2 changed files with 87 additions and 87 deletions

View File

@ -9,41 +9,41 @@ Thu Jun 7 08:46:23 UTC 2018 - meissner@suse.com
Tue May 29 09:47:16 UTC 2018 - meissner@suse.com Tue May 29 09:47:16 UTC 2018 - meissner@suse.com
- openscap-1.2.17 - openscap-1.2.17
- New features - New features
- HTML Guide user experience improvements - HTML Guide user experience improvements
- New options in HTML report "Group By" menu - New options in HTML report "Group By" menu
- oscap-ssh supports --oval-results (issue #863) - oscap-ssh supports --oval-results (issue #863)
- Maintenance - Maintenance
- Support comparing state record elements with item - Support comparing state record elements with item
- Updated Bash completion - Updated Bash completion
- Make Bash role headers consistent with --help output - Make Bash role headers consistent with --help output
- Fixed problems reported by Coverity (issue #909) - Fixed problems reported by Coverity (issue #909)
- Fixed CVE schema to support 4 to 7 digits CVEs - Fixed CVE schema to support 4 to 7 digits CVEs
- Fix output of generated bash role missing fix message - Fix output of generated bash role missing fix message
- Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix oscap-docker to clean up temporary image (RHBZ #1454637)
- Fix Ansible remediations generation - Fix Ansible remediations generation
- Add a newline between ids in xccdf info (issue #968) - Add a newline between ids in xccdf info (issue #968)
- Fix unknown subtype handling in oval_subtype_parse (issue #986) - Fix unknown subtype handling in oval_subtype_parse (issue #986)
- Outsourced the pthreads feature check and setup - Outsourced the pthreads feature check and setup
- Speed up in debug mode - Speed up in debug mode
- Refactored the Python handling in build scripts - Refactored the Python handling in build scripts
- Prevent reading from host in offline mode (issue #1001) - Prevent reading from host in offline mode (issue #1001)
- Many probes use OWN offline mode - Many probes use OWN offline mode
- Improve offline mode logic in OVAL probes - Improve offline mode logic in OVAL probes
- Do not use chroot in system_info probe - Do not use chroot in system_info probe
- Prevent a segfault in oscap_seterr on Solaris - Prevent a segfault in oscap_seterr on Solaris
- Out of tree build is possible - Out of tree build is possible
- Use chroot for RPM probes in offline mode - Use chroot for RPM probes in offline mode
- PEP8 accepts lines up to 99 characters - PEP8 accepts lines up to 99 characters
- New configure parameter --with-oscap-temp-dir (issue #1016) - New configure parameter --with-oscap-temp-dir (issue #1016)
- Fixed OVAL record elements namespace and SEXP conversion - Fixed OVAL record elements namespace and SEXP conversion
- Removed '\r' characters from help output (issue #1023) - Removed '\r' characters from help output (issue #1023)
- Full Python 3 compatibility - Full Python 3 compatibility
- Removed basic Python implementation of oval_probes.c - Removed basic Python implementation of oval_probes.c
- Added support for Travis CI and Sonar Cloud - Added support for Travis CI and Sonar Cloud
- Minor fixes inspired by Sonar Cloud - Minor fixes inspired by Sonar Cloud
- Added Fedora 29 CPE - Added Fedora 29 CPE
- New tests in upstream test suite (offline mode, Ansible, etc.) - New tests in upstream test suite (offline mode, Ansible, etc.)
------------------------------------------------------------------- -------------------------------------------------------------------
Thu Apr 26 12:56:42 UTC 2018 - meissner@suse.com Thu Apr 26 12:56:42 UTC 2018 - meissner@suse.com
@ -70,7 +70,7 @@ Thu Feb 22 13:41:36 UTC 2018 - meissner@suse.com
------------------------------------------------------------------- -------------------------------------------------------------------
Thu Nov 23 13:44:24 UTC 2017 - rbrown@suse.com Thu Nov 23 13:44:24 UTC 2017 - rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) %_fillupdir macro (boo#1069468)
------------------------------------------------------------------- -------------------------------------------------------------------
@ -103,38 +103,38 @@ Tue Nov 14 12:14:41 UTC 2017 - meissner@suse.com
Fri Aug 25 13:41:48 UTC 2017 - meissner@suse.com Fri Aug 25 13:41:48 UTC 2017 - meissner@suse.com
- openscap-1.2.15 / 25-08-2017 - openscap-1.2.15 / 25-08-2017
- New features - New features
- short profile names can be used instead of long IDs - short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule - new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing - new option --fix-type in "oscap xccdf generate fix" allows choosing
remediation script type without typing long URL remediation script type without typing long URL
- "oscap info" shows profile titles - "oscap info" shows profile titles
- OVAL details in HTML report are easier to read - OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed - HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS - HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information - remediation scripts contain headers with useful information
- remediation scripts report progress when they run - remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels) - basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain - remediation scripts can be generated from datastreams that contain
multiple XCCDF benchmarks (issue #772) multiple XCCDF benchmarks (issue #772)
- basic support for OVAL 5.11.2 (only schemas, no features) - basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe (issue #778) - enabled offline RPM database in rpminfo probe (issue #778)
- added Fedora 28 CPE - added Fedora 28 CPE
- Maintenance - Maintenance
- fixed oscap-docker with Docker >= 2.0 (issue #794) - fixed oscap-docker with Docker >= 2.0 (issue #794)
- fixed behavior of sysctl probe to be consistent with sysctl tool - fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts (issue #723, #773) - fixed generating remediation scripts (issue #723, #773)
- severity of tailored rules is not discarded (issue #739) - severity of tailored rules is not discarded (issue #739)
- fixed errors in RPM probes initialization - fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap (issue #713) - oscap-docker shows all warnings reported by oscap (issue #713)
- small improvements in verbose mode - small improvements in verbose mode
- standard C operations are used instead of custom OpenSCAP operations - standard C operations are used instead of custom OpenSCAP operations
- fixed compiler warnings - fixed compiler warnings
- fixed missing header files - fixed missing header files
- fixed resource leaks (issue #715) - fixed resource leaks (issue #715)
- fixed pkgconfig file (RHBZ #1414777) - fixed pkgconfig file (RHBZ #1414777)
- refactoring - refactoring
- documentation fixes and improvements - documentation fixes and improvements
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Apr 7 09:35:00 UTC 2017 - jengelh@inai.de Fri Apr 7 09:35:00 UTC 2017 - jengelh@inai.de
@ -324,24 +324,24 @@ Tue Jan 19 10:22:08 UTC 2016 - meissner@suse.com
Thu Dec 3 13:06:14 UTC 2015 - meissner@suse.com Thu Dec 3 13:06:14 UTC 2015 - meissner@suse.com
- openscap 1.2.7 release - openscap 1.2.7 release
- New features - New features
- OVAL 5.11.1 fully supported - OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines - oscap-vm - tool for offline scanning of virtual machines
- verbose mode - verbose mode
- added SLED, SLES and OpenSUSE CPE names - added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide - show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report - group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix - preliminary support for Ansible Playbooks within xccdf:fix
- added "How to contribute" and "Versioning" documents - added "How to contribute" and "Versioning" documents
- Maintenance - Maintenance
- using bziped RHSA documents in oscap-docker - using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe - fixed errors of sysctl probe
- fixed skip-valid option (issue #203) - fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231) - fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm - fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212) - fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual - updated README and user manual
- many small bugfixes and new tests - many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed - openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream - fix-missing-include.dif: refreshed, 1 hunk upstream

View File

@ -293,7 +293,7 @@ ln -s %{_datadir}/openscap/scap-yast2sec-xccdf.xml %{buildroot}/%{_datadir}/ope
%files docker %files docker
%defattr(-, root, root) %defattr(-, root, root)
%{python_sitelib}/oscap_docker_python #%{python_sitelib}/oscap_docker_python
%{_bindir}/oscap-docker %{_bindir}/oscap-docker
%if 0%{?with_bindings} %if 0%{?with_bindings}