52be04ef7f
- openscap-1.0.8 update: - fixes related to Asset Reporting Format - Inject arf:report/@id into nested rule-result/check/check-content-ref/@href - Add hostname for each fqdn when generating ARF asset identification data - Add all MAC addresses from target-facts to ARF as asset identification data
Marcus Meissner2014-03-28 13:27:20 +00:00
189e79eb96
- openscap-1.0.8 update: - fixes related to Asset Reporting Format - Inject arf:report/@id into nested rule-result/check/check-content-ref/@href - Add hostname for each fqdn when generating ARF asset identification data - Add all MAC addresses from target-facts to ARF as asset identification data
Marcus Meissner2014-03-28 13:27:20 +00:00
e343e56e95
Accepting request 226975 from security
Stephan Kulow
2014-03-22 08:09:03 +00:00
a3587e8652
Accepting request 226975 from security
Stephan Kulow
2014-03-22 08:09:03 +00:00
2010e41160
- openscap-1.0.7 update: - fix namespaces for attributes in ARF relationship element - Avoid ".00" as the score in HTML report when score is 0.
Marcus Meissner2014-03-21 12:47:33 +00:00
5e1b16f041
- openscap-1.0.7 update: - fix namespaces for attributes in ARF relationship element - Avoid ".00" as the score in HTML report when score is 0.
Marcus Meissner2014-03-21 12:47:33 +00:00
6d6ff35780
- openscap-1.0.6 update: - fix process58 loginuid integer handling on 32bit
Marcus Meissner2014-03-19 09:17:18 +00:00
0992278369
- openscap-1.0.6 update: - fix process58 loginuid integer handling on 32bit
Marcus Meissner2014-03-19 09:17:18 +00:00
285202eddf
Accepting request 226350 from security
Stephan Kulow
2014-03-18 13:15:47 +00:00
cf57fd64ae
Accepting request 226350 from security
Stephan Kulow
2014-03-18 13:15:47 +00:00
b2b3ac6f11
- openscap-1.0.5 update: - XCCDF titles and description support xccdf:sub resolution - HTML Report lists only applicable cpe platforms - TestResult element contains applicable cpe platforms - Introduced XCCDF 1.2 schematron validation - XCCDF bug fixes - tailoring profiles shall regards inherited refine-values (trac#373) - rule-result now always includes at least one check - Other bug fixes: - Dpkginfo probe collects epoch in evr - Updated examplary openscap-content based on the latest facts from Red Hat Enterprise Linux 6 - Minor changes
Marcus Meissner2014-03-17 07:13:53 +00:00
11106b3f8b
- openscap-1.0.5 update: - XCCDF titles and description support xccdf:sub resolution - HTML Report lists only applicable cpe platforms - TestResult element contains applicable cpe platforms - Introduced XCCDF 1.2 schematron validation - XCCDF bug fixes - tailoring profiles shall regards inherited refine-values (trac#373) - rule-result now always includes at least one check - Other bug fixes: - Dpkginfo probe collects epoch in evr - Updated examplary openscap-content based on the latest facts from Red Hat Enterprise Linux 6 - Minor changes
Marcus Meissner2014-03-17 07:13:53 +00:00
f49aec07cc
Accepting request 222332 from security
Stephan Kulow
2014-02-15 07:06:13 +00:00
69e5a7fc08
Accepting request 222332 from security
Stephan Kulow
2014-02-15 07:06:13 +00:00
8cfe5d817d
- openscap-1.0.4 update: - Introduced xccdf_tailoring_remove_profile to API - OVAL bug fixes
Marcus Meissner2014-02-14 10:23:10 +00:00
92e2ce9219
- openscap-1.0.4 update: - Introduced xccdf_tailoring_remove_profile to API - OVAL bug fixes
Marcus Meissner2014-02-14 10:23:10 +00:00
86c0dca78b
Accepting request 213907 from security
Stephan Kulow
2014-01-14 20:51:03 +00:00
b7683e12a4
Accepting request 213907 from security
Stephan Kulow
2014-01-14 20:51:03 +00:00
4dd53c3df2
- openscap-1.0.3 update: - bug fixes - a few coverity issues - a few memory leak plugs - broken comparison of huge integet in OVAL
Marcus Meissner2014-01-14 16:43:45 +00:00
6045eedad2
- openscap-1.0.3 update: - bug fixes - a few coverity issues - a few memory leak plugs - broken comparison of huge integet in OVAL
Marcus Meissner2014-01-14 16:43:45 +00:00
9b8de6dd1a
Accepting request 213430 from security
Stephan Kulow
2014-01-10 20:21:38 +00:00
39f19cfd0f
Accepting request 213430 from security
Stephan Kulow
2014-01-10 20:21:38 +00:00
0dfc5ab4fd
- openscap-1.0.2 update: - XCCDF generate fix now supports tailoring file - XCCDF bug fixes - Generate guide points to RHSA pages (rhbz#1018291) - Generate report ommits remediation when assesment passed (rhbz#1029879) - $PATH variable is available for SCE checks (rhbz#1026833) - Tailoring of top-level Group elements via API fixed - Fix-filtering should not drop fixes (affected SSG) - Generated fix file is created with sane permissions (trac#362) - Inherit parent's namespace when exporting oscap_text with HTML trait - OVAL bug fixes: - Handful of xinetd probe fixes - Handful of process and process58 fixes - Obsoleted textfilecontent now supports text ent comparisons - rpm*_item/epoch is reported as '(none)' when needed - Fixed dozen of flaws in ipv4 and ipv6_address comparison (CIDR handling) - Made integer and floating type number parsing much stricter - Fixed floating point numbers comparisons (trac#366) - Fixed case-insensitive comparisons - Item filtering fixes in probes - Consolidated some of comparisons in results model and probes (trac#367) - Other bug fixes: - Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248) - Fixed static build (--disable-shared) - Format assertions (-Werror=format-security) turned on by default - SCE scripts are notified when parent (oscap) is killed
Marcus Meissner2014-01-10 10:26:02 +00:00
4ef63de556
- openscap-1.0.2 update: - XCCDF generate fix now supports tailoring file - XCCDF bug fixes - Generate guide points to RHSA pages (rhbz#1018291) - Generate report ommits remediation when assesment passed (rhbz#1029879) - $PATH variable is available for SCE checks (rhbz#1026833) - Tailoring of top-level Group elements via API fixed - Fix-filtering should not drop fixes (affected SSG) - Generated fix file is created with sane permissions (trac#362) - Inherit parent's namespace when exporting oscap_text with HTML trait - OVAL bug fixes: - Handful of xinetd probe fixes - Handful of process and process58 fixes - Obsoleted textfilecontent now supports text ent comparisons - rpm*_item/epoch is reported as '(none)' when needed - Fixed dozen of flaws in ipv4 and ipv6_address comparison (CIDR handling) - Made integer and floating type number parsing much stricter - Fixed floating point numbers comparisons (trac#366) - Fixed case-insensitive comparisons - Item filtering fixes in probes - Consolidated some of comparisons in results model and probes (trac#367) - Other bug fixes: - Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248) - Fixed static build (--disable-shared) - Format assertions (-Werror=format-security) turned on by default - SCE scripts are notified when parent (oscap) is killed
Marcus Meissner2014-01-10 10:26:02 +00:00
94abb559f6
Accepting request 209232 from security
Stephan Kulow
2013-12-03 13:26:49 +00:00
9da4a98f56
Accepting request 209232 from security
Stephan Kulow
2013-12-03 13:26:49 +00:00
542ce3e0de
- move the gconf probe to openscap-extra-probes to reduce dependencies of the core probe set.
Marcus Meissner2013-12-02 16:54:33 +00:00
8144982cda
- move the gconf probe to openscap-extra-probes to reduce dependencies of the core probe set.
Marcus Meissner2013-12-02 16:54:33 +00:00
6843cd48fc
Accepting request 208809 from security
Stephan Kulow
2013-11-28 15:51:52 +00:00
41f05103c8
Accepting request 208809 from security
Stephan Kulow
2013-11-28 15:51:52 +00:00
eda321543e
- openscap-1.0.1 update: - versioned interface is used to handle internal SCE plug-in - build-in gnulib package was updated to current version - bug fixes: - selinux_domain_label and posix_capability properties were reintroduced to OVAL system characteristics model - selinux_domain_label now collects the domain/type (not the context) - oscap oval collect reports progress on stdout (not on the stderr) - typo in the manual page (rhbz#1032537), and another small clarification
Marcus Meissner2013-11-28 12:57:38 +00:00
44e3357a41
- openscap-1.0.1 update: - versioned interface is used to handle internal SCE plug-in - build-in gnulib package was updated to current version - bug fixes: - selinux_domain_label and posix_capability properties were reintroduced to OVAL system characteristics model - selinux_domain_label now collects the domain/type (not the context) - oscap oval collect reports progress on stdout (not on the stderr) - typo in the manual page (rhbz#1032537), and another small clarification
Marcus Meissner2013-11-28 12:57:38 +00:00
9aef09f7f7
Accepting request 207593 from security
Stephan Kulow
2013-11-20 09:48:55 +00:00
e64c4adb66
Accepting request 207593 from security
Stephan Kulow
2013-11-20 09:48:55 +00:00
cc7b26660d
- openscap-1.0.0 / 19-11-2013 - Improved heuristic to distinguish 'local' and 'remote' file systems - Improved comparison of EntityStateEVRStringType (trac#355) - Link against librpm (if available) to include rpmvercmp (on other platforms we fall back to the build-in rpmvercmp) - Bug fixes - openscap-0.9.13 / 08-11-2013 - Moved SCE to separate shared library (libopenscap_sce.so) - Introduction of scap-as-rpm tool - Improvements of sql and sql57 probes - Improvements of SELinux policy - Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf) - Minor improvements in state_entity processing - Introduction of CPE name for Fedora 21 to the internal dictionary - Added support for ind-def:pid/@xsi:nil (rhbz#1013011) - Improved error reporting - Bug fixes - Changed CPE name regex to be more permissive - avoided reports from the library to the stdout and stderr - plugged several memory leaks - improved xccdf:check-content-refs processing - misspelling in syslog message (rhbz#1021695) - fixed OVAL's <field> element processing - fixes based on static analysers - test suite is locale independent
Marcus Meissner2013-11-19 12:51:39 +00:00
5ee9f9d332
- openscap-1.0.0 / 19-11-2013 - Improved heuristic to distinguish 'local' and 'remote' file systems - Improved comparison of EntityStateEVRStringType (trac#355) - Link against librpm (if available) to include rpmvercmp (on other platforms we fall back to the build-in rpmvercmp) - Bug fixes - openscap-0.9.13 / 08-11-2013 - Moved SCE to separate shared library (libopenscap_sce.so) - Introduction of scap-as-rpm tool - Improvements of sql and sql57 probes - Improvements of SELinux policy - Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf) - Minor improvements in state_entity processing - Introduction of CPE name for Fedora 21 to the internal dictionary - Added support for ind-def:pid/@xsi:nil (rhbz#1013011) - Improved error reporting - Bug fixes - Changed CPE name regex to be more permissive - avoided reports from the library to the stdout and stderr - plugged several memory leaks - improved xccdf:check-content-refs processing - misspelling in syslog message (rhbz#1021695) - fixed OVAL's <field> element processing - fixes based on static analysers - test suite is locale independent
Marcus Meissner2013-11-19 12:51:39 +00:00
72efa00d5e
Accepting request 202982 from security
Tomáš Chvátal
2013-10-11 14:40:01 +00:00
374dd718e3
Accepting request 202982 from security
Tomáš Chvátal
2013-10-11 14:40:01 +00:00
ea1415c645
- Updated to 0.9.12 - tailoring improvements (@id, version, and benchmark ref attributes) - XCCDF 1.1 tailoring extension - improved robustness of CPE dictionary parser and exporter - and added misc CPE 2.3 elements - added Fedora 20 to internal CPE dictionary - updated OVAL's results_to_html stylesheet from Mitre Corporation. - profiles with duplicate selects (same @idref) now export correctly - test improvements - bug fixes - fixed IPv6 export in TestResult/target-address - consistently inject target-id-ref into TestResult in ARFs - improved rpmdb manipulation (rhbz#999903) - solaris build fixes - spelling of name of default language fixed (oscap_text related) - fixed CPE names matching (generalization vs. specialization)
Marcus Meissner2013-10-11 13:24:48 +00:00
2ac55a0bb1
- Updated to 0.9.12 - tailoring improvements (@id, version, and benchmark ref attributes) - XCCDF 1.1 tailoring extension - improved robustness of CPE dictionary parser and exporter - and added misc CPE 2.3 elements - added Fedora 20 to internal CPE dictionary - updated OVAL's results_to_html stylesheet from Mitre Corporation. - profiles with duplicate selects (same @idref) now export correctly - test improvements - bug fixes - fixed IPv6 export in TestResult/target-address - consistently inject target-id-ref into TestResult in ARFs - improved rpmdb manipulation (rhbz#999903) - solaris build fixes - spelling of name of default language fixed (oscap_text related) - fixed CPE names matching (generalization vs. specialization)
Marcus Meissner2013-10-11 13:24:48 +00:00
30496f2b62
Accepting request 183561 from security
Stephan Kulow
2013-07-18 15:32:45 +00:00
ae274832cd
Accepting request 183561 from security
Stephan Kulow
2013-07-18 15:32:45 +00:00
c894f996e0
- Updated to 0.9.11 - bugfixes - Updated to 0.9.10 - bugfixes - Updated to 0.9.9 - --oval-results also exports CPE OVAL results - added --benchmark-id to select a component-ref by ID of Benchmark it's pointing to - OVAL variable_instance processing (or so called value multiset) and the processing of @variable_instance attribute to OVAL Result Definition, OVAL Result Test and Collected Objects. - improved test coverage of OVAL variable processing - introduced new internal data type: oval_smc - added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm database offline mode - bug fixes and dead code removal
Marcus Meissner2013-07-17 15:31:02 +00:00
f91430ce81
- Updated to 0.9.11 - bugfixes - Updated to 0.9.10 - bugfixes - Updated to 0.9.9 - --oval-results also exports CPE OVAL results - added --benchmark-id to select a component-ref by ID of Benchmark it's pointing to - OVAL variable_instance processing (or so called value multiset) and the processing of @variable_instance attribute to OVAL Result Definition, OVAL Result Test and Collected Objects. - improved test coverage of OVAL variable processing - introduced new internal data type: oval_smc - added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm database offline mode - bug fixes and dead code removal
Marcus Meissner2013-07-17 15:31:02 +00:00
dbcf6379f4
Accepting request 179323 from security
Stephan Kulow
2013-06-18 08:34:22 +00:00
7269f143e2
Accepting request 179323 from security
Stephan Kulow
2013-06-18 08:34:22 +00:00
2976ae7955
- updated to 0.9.8 - added experimental support for offline mode scanning to the OVAL check engine (i.e. scanning of virtual host disk images) - improved OVAL variables processing - bug fixes and dead code removal - fix-missing-include.dif
Marcus Meissner2013-06-17 11:45:11 +00:00
1fb68dee49
- updated to 0.9.8 - added experimental support for offline mode scanning to the OVAL check engine (i.e. scanning of virtual host disk images) - improved OVAL variables processing - bug fixes and dead code removal - fix-missing-include.dif
Marcus Meissner2013-06-17 11:45:11 +00:00
144d1a237b
Accepting request 174618 from security
Stephan Kulow
2013-05-07 13:17:06 +00:00
628415a8ab
Accepting request 174618 from security
Stephan Kulow
2013-05-07 13:17:06 +00:00
96ab541e94
Accepting request 174495 from systemsmanagement:spacewalk
Marcus Meissner2013-05-06 11:09:31 +00:00
973b9bbcd4
Accepting request 174495 from systemsmanagement:spacewalk
Marcus Meissner2013-05-06 11:09:31 +00:00
7dcb3c2983
- updated to 0.9.5 - oscap xccdf remediate (new oscap module which introduces offline remediation; the remediation based on existing xccdf:testresult file) - added support for sce into datastream (sce scripts can now be embedded into the datastream file similarly as oval can) - improved bash completion and documentation - bug fixes
Marcus Meissner2013-03-20 10:08:56 +00:00
a7e6da3567
- updated to 0.9.5 - oscap xccdf remediate (new oscap module which introduces offline remediation; the remediation based on existing xccdf:testresult file) - added support for sce into datastream (sce scripts can now be embedded into the datastream file similarly as oval can) - improved bash completion and documentation - bug fixes
Marcus Meissner2013-03-20 10:08:56 +00:00
d827a04249
Accepting request 157811 from security
Stephan Kulow
2013-03-08 08:28:20 +00:00
6735435aa3
Accepting request 157811 from security
Stephan Kulow
2013-03-08 08:28:20 +00:00
31edd971d4
- updated to 0.9.3 - Embedded CPE dictionary (allows users to ommit --cpe argument) - improvements of DataStream and CPE processing on RHEL5 - changed API of various functions in cpe_dict, benchmark and xccdf_policy to use string timestamp instead of time_t [1] - fixed several issues found by Coverity and cppcheck static code analysis - bug fixes
Marcus Meissner2013-01-08 10:49:19 +00:00
54ce671d5f
- updated to 0.9.3 - Embedded CPE dictionary (allows users to ommit --cpe argument) - improvements of DataStream and CPE processing on RHEL5 - changed API of various functions in cpe_dict, benchmark and xccdf_policy to use string timestamp instead of time_t [1] - fixed several issues found by Coverity and cppcheck static code analysis - bug fixes
Marcus Meissner2013-01-08 10:49:19 +00:00
9e21a13c0b
Accepting request 142947 from security
Stephan Kulow
2012-11-28 10:44:51 +00:00
8ca61008e9
Accepting request 142947 from security
Stephan Kulow
2012-11-28 10:44:51 +00:00
0a46b5c858
- updated to 0.9.2: - rewritten the heuristic for pattern matching on path and filepath - CPE 2.3 language applicability testing - new ds_sds_index API providing a datastream overview - CPEs in source datastreams are automatically registered and used for XCCDF evaluation - --cpe option autodetects CPE dictionary and language - CVE support (validate feed, print CVEs) - introduced info module - made "$oscap xccdf generate custom" work again -> man page update - bug fixes
Marcus Meissner2012-11-19 15:47:31 +00:00
657a772e04
- updated to 0.9.2: - rewritten the heuristic for pattern matching on path and filepath - CPE 2.3 language applicability testing - new ds_sds_index API providing a datastream overview - CPEs in source datastreams are automatically registered and used for XCCDF evaluation - --cpe option autodetects CPE dictionary and language - CVE support (validate feed, print CVEs) - introduced info module - made "$oscap xccdf generate custom" work again -> man page update - bug fixes
Marcus Meissner2012-11-19 15:47:31 +00:00
eda103a847
- updated to 0.9.1: - the http in the check-content-ref/@hrefhref support - the cpedict support - obsoleted the oscap_reporter - send start and finish messages to the syslog - the XCCDF multi-check evaluation support - "oscap oval validate-xml" autodetect a document type - bug fixes
Marcus Meissner2012-10-25 14:28:29 +00:00
ff3916539d
- updated to 0.9.1: - the http in the check-content-ref/@hrefhref support - the cpedict support - obsoleted the oscap_reporter - send start and finish messages to the syslog - the XCCDF multi-check evaluation support - "oscap oval validate-xml" autodetect a document type - bug fixes
Marcus Meissner2012-10-25 14:28:29 +00:00
f20e5c3bba
Accepting request 136321 from security
Stephan Kulow
2012-10-03 07:21:12 +00:00
c6e1dd2fce
Accepting request 136321 from security
Stephan Kulow
2012-10-03 07:21:12 +00:00
Marcus Meissner
Stephan Kulow
Tomáš Chvátal