- New features
- HTML Guide user experience improvements - New options in HTML report "Group By" menu - oscap-ssh supports --oval-results (issue #863) - Maintenance - Support comparing state record elements with item - Updated Bash completion - Make Bash role headers consistent with --help output - Fixed problems reported by Coverity (issue #909) - Fixed CVE schema to support 4 to 7 digits CVEs - Fix output of generated bash role missing fix message - Fix oscap-docker to clean up temporary image (RHBZ #1454637) - Fix Ansible remediations generation - Add a newline between ids in xccdf info (issue #968) - Fix unknown subtype handling in oval_subtype_parse (issue #986) - Outsourced the pthreads feature check and setup - Speed up in debug mode - Refactored the Python handling in build scripts - Prevent reading from host in offline mode (issue #1001) - Many probes use OWN offline mode - Improve offline mode logic in OVAL probes - Do not use chroot in system_info probe - Prevent a segfault in oscap_seterr on Solaris - Out of tree build is possible - Use chroot for RPM probes in offline mode - PEP8 accepts lines up to 99 characters - New configure parameter --with-oscap-temp-dir (issue #1016) - Fixed OVAL record elements namespace and SEXP conversion - Removed '\r' characters from help output (issue #1023) - Full Python 3 compatibility OBS-URL: https://build.opensuse.org/package/show/security/openscap?expand=0&rev=215
This commit is contained in:
parent
4db5e7cc47
commit
01a370031b
172
openscap.changes
172
openscap.changes
@ -9,41 +9,41 @@ Thu Jun 7 08:46:23 UTC 2018 - meissner@suse.com
|
|||||||
Tue May 29 09:47:16 UTC 2018 - meissner@suse.com
|
Tue May 29 09:47:16 UTC 2018 - meissner@suse.com
|
||||||
|
|
||||||
- openscap-1.2.17
|
- openscap-1.2.17
|
||||||
- New features
|
- New features
|
||||||
- HTML Guide user experience improvements
|
- HTML Guide user experience improvements
|
||||||
- New options in HTML report "Group By" menu
|
- New options in HTML report "Group By" menu
|
||||||
- oscap-ssh supports --oval-results (issue #863)
|
- oscap-ssh supports --oval-results (issue #863)
|
||||||
- Maintenance
|
- Maintenance
|
||||||
- Support comparing state record elements with item
|
- Support comparing state record elements with item
|
||||||
- Updated Bash completion
|
- Updated Bash completion
|
||||||
- Make Bash role headers consistent with --help output
|
- Make Bash role headers consistent with --help output
|
||||||
- Fixed problems reported by Coverity (issue #909)
|
- Fixed problems reported by Coverity (issue #909)
|
||||||
- Fixed CVE schema to support 4 to 7 digits CVEs
|
- Fixed CVE schema to support 4 to 7 digits CVEs
|
||||||
- Fix output of generated bash role missing fix message
|
- Fix output of generated bash role missing fix message
|
||||||
- Fix oscap-docker to clean up temporary image (RHBZ #1454637)
|
- Fix oscap-docker to clean up temporary image (RHBZ #1454637)
|
||||||
- Fix Ansible remediations generation
|
- Fix Ansible remediations generation
|
||||||
- Add a newline between ids in xccdf info (issue #968)
|
- Add a newline between ids in xccdf info (issue #968)
|
||||||
- Fix unknown subtype handling in oval_subtype_parse (issue #986)
|
- Fix unknown subtype handling in oval_subtype_parse (issue #986)
|
||||||
- Outsourced the pthreads feature check and setup
|
- Outsourced the pthreads feature check and setup
|
||||||
- Speed up in debug mode
|
- Speed up in debug mode
|
||||||
- Refactored the Python handling in build scripts
|
- Refactored the Python handling in build scripts
|
||||||
- Prevent reading from host in offline mode (issue #1001)
|
- Prevent reading from host in offline mode (issue #1001)
|
||||||
- Many probes use OWN offline mode
|
- Many probes use OWN offline mode
|
||||||
- Improve offline mode logic in OVAL probes
|
- Improve offline mode logic in OVAL probes
|
||||||
- Do not use chroot in system_info probe
|
- Do not use chroot in system_info probe
|
||||||
- Prevent a segfault in oscap_seterr on Solaris
|
- Prevent a segfault in oscap_seterr on Solaris
|
||||||
- Out of tree build is possible
|
- Out of tree build is possible
|
||||||
- Use chroot for RPM probes in offline mode
|
- Use chroot for RPM probes in offline mode
|
||||||
- PEP8 accepts lines up to 99 characters
|
- PEP8 accepts lines up to 99 characters
|
||||||
- New configure parameter --with-oscap-temp-dir (issue #1016)
|
- New configure parameter --with-oscap-temp-dir (issue #1016)
|
||||||
- Fixed OVAL record elements namespace and SEXP conversion
|
- Fixed OVAL record elements namespace and SEXP conversion
|
||||||
- Removed '\r' characters from help output (issue #1023)
|
- Removed '\r' characters from help output (issue #1023)
|
||||||
- Full Python 3 compatibility
|
- Full Python 3 compatibility
|
||||||
- Removed basic Python implementation of oval_probes.c
|
- Removed basic Python implementation of oval_probes.c
|
||||||
- Added support for Travis CI and Sonar Cloud
|
- Added support for Travis CI and Sonar Cloud
|
||||||
- Minor fixes inspired by Sonar Cloud
|
- Minor fixes inspired by Sonar Cloud
|
||||||
- Added Fedora 29 CPE
|
- Added Fedora 29 CPE
|
||||||
- New tests in upstream test suite (offline mode, Ansible, etc.)
|
- New tests in upstream test suite (offline mode, Ansible, etc.)
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Thu Apr 26 12:56:42 UTC 2018 - meissner@suse.com
|
Thu Apr 26 12:56:42 UTC 2018 - meissner@suse.com
|
||||||
@ -70,7 +70,7 @@ Thu Feb 22 13:41:36 UTC 2018 - meissner@suse.com
|
|||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Thu Nov 23 13:44:24 UTC 2017 - rbrown@suse.com
|
Thu Nov 23 13:44:24 UTC 2017 - rbrown@suse.com
|
||||||
|
|
||||||
- Replace references to /var/adm/fillup-templates with new
|
- Replace references to /var/adm/fillup-templates with new
|
||||||
%_fillupdir macro (boo#1069468)
|
%_fillupdir macro (boo#1069468)
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
@ -103,38 +103,38 @@ Tue Nov 14 12:14:41 UTC 2017 - meissner@suse.com
|
|||||||
Fri Aug 25 13:41:48 UTC 2017 - meissner@suse.com
|
Fri Aug 25 13:41:48 UTC 2017 - meissner@suse.com
|
||||||
|
|
||||||
- openscap-1.2.15 / 25-08-2017
|
- openscap-1.2.15 / 25-08-2017
|
||||||
- New features
|
- New features
|
||||||
- short profile names can be used instead of long IDs
|
- short profile names can be used instead of long IDs
|
||||||
- new option --rule allows to evaluate only a single rule
|
- new option --rule allows to evaluate only a single rule
|
||||||
- new option --fix-type in "oscap xccdf generate fix" allows choosing
|
- new option --fix-type in "oscap xccdf generate fix" allows choosing
|
||||||
remediation script type without typing long URL
|
remediation script type without typing long URL
|
||||||
- "oscap info" shows profile titles
|
- "oscap info" shows profile titles
|
||||||
- OVAL details in HTML report are easier to read
|
- OVAL details in HTML report are easier to read
|
||||||
- HTML report is smaller because unselected rules are removed
|
- HTML report is smaller because unselected rules are removed
|
||||||
- HTML report supports NIST 800-171 and CJIS
|
- HTML report supports NIST 800-171 and CJIS
|
||||||
- remediation scripts contain headers with useful information
|
- remediation scripts contain headers with useful information
|
||||||
- remediation scripts report progress when they run
|
- remediation scripts report progress when they run
|
||||||
- basic support for Oracle Linux (CPEs, runlevels)
|
- basic support for Oracle Linux (CPEs, runlevels)
|
||||||
- remediation scripts can be generated from datastreams that contain
|
- remediation scripts can be generated from datastreams that contain
|
||||||
multiple XCCDF benchmarks (issue #772)
|
multiple XCCDF benchmarks (issue #772)
|
||||||
- basic support for OVAL 5.11.2 (only schemas, no features)
|
- basic support for OVAL 5.11.2 (only schemas, no features)
|
||||||
- enabled offline RPM database in rpminfo probe (issue #778)
|
- enabled offline RPM database in rpminfo probe (issue #778)
|
||||||
- added Fedora 28 CPE
|
- added Fedora 28 CPE
|
||||||
- Maintenance
|
- Maintenance
|
||||||
- fixed oscap-docker with Docker >= 2.0 (issue #794)
|
- fixed oscap-docker with Docker >= 2.0 (issue #794)
|
||||||
- fixed behavior of sysctl probe to be consistent with sysctl tool
|
- fixed behavior of sysctl probe to be consistent with sysctl tool
|
||||||
- fixed generating remediation scripts (issue #723, #773)
|
- fixed generating remediation scripts (issue #723, #773)
|
||||||
- severity of tailored rules is not discarded (issue #739)
|
- severity of tailored rules is not discarded (issue #739)
|
||||||
- fixed errors in RPM probes initialization
|
- fixed errors in RPM probes initialization
|
||||||
- oscap-docker shows all warnings reported by oscap (issue #713)
|
- oscap-docker shows all warnings reported by oscap (issue #713)
|
||||||
- small improvements in verbose mode
|
- small improvements in verbose mode
|
||||||
- standard C operations are used instead of custom OpenSCAP operations
|
- standard C operations are used instead of custom OpenSCAP operations
|
||||||
- fixed compiler warnings
|
- fixed compiler warnings
|
||||||
- fixed missing header files
|
- fixed missing header files
|
||||||
- fixed resource leaks (issue #715)
|
- fixed resource leaks (issue #715)
|
||||||
- fixed pkgconfig file (RHBZ #1414777)
|
- fixed pkgconfig file (RHBZ #1414777)
|
||||||
- refactoring
|
- refactoring
|
||||||
- documentation fixes and improvements
|
- documentation fixes and improvements
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Fri Apr 7 09:35:00 UTC 2017 - jengelh@inai.de
|
Fri Apr 7 09:35:00 UTC 2017 - jengelh@inai.de
|
||||||
@ -324,24 +324,24 @@ Tue Jan 19 10:22:08 UTC 2016 - meissner@suse.com
|
|||||||
Thu Dec 3 13:06:14 UTC 2015 - meissner@suse.com
|
Thu Dec 3 13:06:14 UTC 2015 - meissner@suse.com
|
||||||
|
|
||||||
- openscap 1.2.7 release
|
- openscap 1.2.7 release
|
||||||
- New features
|
- New features
|
||||||
- OVAL 5.11.1 fully supported
|
- OVAL 5.11.1 fully supported
|
||||||
- oscap-vm - tool for offline scanning of virtual machines
|
- oscap-vm - tool for offline scanning of virtual machines
|
||||||
- verbose mode
|
- verbose mode
|
||||||
- added SLED, SLES and OpenSUSE CPE names
|
- added SLED, SLES and OpenSUSE CPE names
|
||||||
- show profile description in HTML report and guide
|
- show profile description in HTML report and guide
|
||||||
- group rules by PCI DSS identifier in HTML report
|
- group rules by PCI DSS identifier in HTML report
|
||||||
- preliminary support for Ansible Playbooks within xccdf:fix
|
- preliminary support for Ansible Playbooks within xccdf:fix
|
||||||
- added "How to contribute" and "Versioning" documents
|
- added "How to contribute" and "Versioning" documents
|
||||||
- Maintenance
|
- Maintenance
|
||||||
- using bziped RHSA documents in oscap-docker
|
- using bziped RHSA documents in oscap-docker
|
||||||
- fixed errors of sysctl probe
|
- fixed errors of sysctl probe
|
||||||
- fixed skip-valid option (issue #203)
|
- fixed skip-valid option (issue #203)
|
||||||
- fixed segmentation faults in SCE content reporting (issue #231)
|
- fixed segmentation faults in SCE content reporting (issue #231)
|
||||||
- fixed tracebacks of scap-as-rpm
|
- fixed tracebacks of scap-as-rpm
|
||||||
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
|
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
|
||||||
- updated README and user manual
|
- updated README and user manual
|
||||||
- many small bugfixes and new tests
|
- many small bugfixes and new tests
|
||||||
- openscap-new-inventory.patch: upstreamed
|
- openscap-new-inventory.patch: upstreamed
|
||||||
- fix-missing-include.dif: refreshed, 1 hunk upstream
|
- fix-missing-include.dif: refreshed, 1 hunk upstream
|
||||||
|
|
||||||
|
@ -293,7 +293,7 @@ ln -s %{_datadir}/openscap/scap-yast2sec-xccdf.xml %{buildroot}/%{_datadir}/ope
|
|||||||
|
|
||||||
%files docker
|
%files docker
|
||||||
%defattr(-, root, root)
|
%defattr(-, root, root)
|
||||||
%{python_sitelib}/oscap_docker_python
|
#%{python_sitelib}/oscap_docker_python
|
||||||
%{_bindir}/oscap-docker
|
%{_bindir}/oscap-docker
|
||||||
|
|
||||||
%if 0%{?with_bindings}
|
%if 0%{?with_bindings}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user