2015-10-05 13:46:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 5 11:45:28 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap 1.2.6 release
|
|
|
|
|
- New features
|
|
|
|
|
- introduced OpenSCAP user manual
|
|
|
|
|
- improved OVAL 5.11.1 support
|
|
|
|
|
- added OVAL 5.11.1 XSD schemas and schematrons
|
|
|
|
|
- support for core/platform schema versions
|
|
|
|
|
- support for check_existence attribute in state entities
|
|
|
|
|
- support for CIM datetime format
|
|
|
|
|
- amended behavior of mask attribute
|
|
|
|
|
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
|
|
|
|
|
- rewrote oscap-docker to python, deeper integration with Atomic Host
|
|
|
|
|
- introduced CPE name for Fedora 24 to the internal dictionary
|
|
|
|
|
- HTML report & guide
|
|
|
|
|
- results can be grouped by according to various aspects
|
|
|
|
|
- printing supported (interactive elements are now hidden when printing)
|
|
|
|
|
- table of content now shows only selected items (rule & groups)
|
|
|
|
|
- references to RHSA are presented as links to website (rhbz#1243808)
|
|
|
|
|
- Maintenance
|
|
|
|
|
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
|
|
|
|
|
- scap-as-rpm now supports python3
|
|
|
|
|
- refactored oval processing into oval_session structure
|
|
|
|
|
- many smaller bugfixes and new tests
|
|
|
|
|
|
2015-07-06 13:46:24 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 6 11:40:29 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.2.5 update
|
|
|
|
|
- maintenance
|
|
|
|
|
- smaller bugfixes
|
|
|
|
|
- plugged memory leaks
|
|
|
|
|
- fixed fresh static analysis (coverity) findings
|
|
|
|
|
- fixed shellcheck warnings
|
|
|
|
|
- fixes for Solaris platform
|
|
|
|
|
|
2015-06-22 11:42:15 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 22 09:39:44 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.2.4 update
|
|
|
|
|
- new features
|
|
|
|
|
- OVAL 5.11 support 99.8% completed!
|
|
|
|
|
- new symlink probe introduced
|
|
|
|
|
- new process58 test capabilities
|
|
|
|
|
- added possible_value support for external variables
|
|
|
|
|
- added possible_restriction support for external variables
|
|
|
|
|
- improved IP address comparisons
|
|
|
|
|
- Added Scientific Linux CPEs
|
|
|
|
|
- Added oscap-docker tool
|
|
|
|
|
- Created man-page for oscap-ssh
|
|
|
|
|
- HTML changes
|
|
|
|
|
- improved visibility of selected XCCDF profile in guides and reports
|
|
|
|
|
- render rule-result/message contents in reports
|
|
|
|
|
- maintenance
|
|
|
|
|
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
|
|
|
|
|
- partition probe now supports remount, bind and move mount options
|
|
|
|
|
- Patched NIST OVAL-5.11 schemas to be backward compatible with
|
|
|
|
|
OVAL-5.10 (rhbz#1220262)
|
|
|
|
|
- fixed scap-as-rpm to work with vintage python (2.6)
|
|
|
|
|
- better error reporting when a probe dies (i.e. due to OOM killer)
|
|
|
|
|
- dropped selinux policy from upstream (rhbz#1209969)
|
|
|
|
|
- fix segfault on invalid selectors (rhbz#1220944)
|
|
|
|
|
- solaris support patches: file-system zones, systeminfo improvements
|
|
|
|
|
- many smaller fixes and new tests
|
|
|
|
|
|
|
|
|
|
|
2015-04-07 11:36:35 +02:00
|
|
|
-------------------------------------------------------------------
|
2015-05-03 09:56:39 +02:00
|
|
|
Sun May 3 07:55:55 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.2.3 update
|
|
|
|
|
- new features
|
|
|
|
|
- oscap-ssh -- handy utility to run remote scan over ssh
|
|
|
|
|
- glob_to_regexp OVAL function added
|
|
|
|
|
- HTML changes
|
|
|
|
|
- show rationale elements
|
|
|
|
|
- show fixtext elements
|
|
|
|
|
- show Benchmark's front-matter, description and notices
|
|
|
|
|
- show warnings for Groups and Rules
|
|
|
|
|
- improved handling of multiple fixes within a single Rule
|
|
|
|
|
- scroll evaluation characteristic if they overflow
|
|
|
|
|
- maintenance
|
|
|
|
|
- OVAL 5.11 schema fixes
|
|
|
|
|
- Coverity and memory leak fixes
|
|
|
|
|
- skip transient files when traversing /proc (trac#457)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2015-04-07 11:36:35 +02:00
|
|
|
Tue Apr 7 09:35:55 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.2.2 update
|
|
|
|
|
- new features
|
|
|
|
|
- OVAL 5.11 support turned on by default
|
|
|
|
|
- included OVAL 5.11 schematron rules
|
|
|
|
|
- DataStream can now contain OVAL 5.11
|
|
|
|
|
- `oscap ds sds-compose` now supports --skip-valid parameter
|
|
|
|
|
- HTML report changes
|
|
|
|
|
- Notably increased level of OVAL details
|
|
|
|
|
- Table of contents is now generated for HTML guides
|
|
|
|
|
- maitenance
|
|
|
|
|
- rhbz#1182242, rhbz#1159289 - @var_check & @var_ref exporting
|
|
|
|
|
- solaris build fixes
|
|
|
|
|
- xccdf:fix/instance processing fixes
|
|
|
|
|
- improved (none) epoch processing in rpm probe
|
|
|
|
|
- environmentvariable58 now emits warning messages when appropriate
|
|
|
|
|
- offline mode improvements
|
|
|
|
|
- other bugfixes
|
|
|
|
|
|
2015-01-12 10:44:35 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 12 09:40:11 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
2015-04-07 11:36:35 +02:00
|
|
|
- openscap-1.2.1 update
|
2015-01-12 10:44:35 +01:00
|
|
|
- API changes
|
|
|
|
|
- 5.11 schemas updated (from RC1 to gold)
|
|
|
|
|
- oscap_source_new_from_memory can take bzip2ed content
|
|
|
|
|
- HTML report changes
|
|
|
|
|
- severity bar is now reversed (left-to-right)
|
|
|
|
|
- maintenance
|
|
|
|
|
- rhbz#1165139 - fix probe cancelation
|
|
|
|
|
- dozen of bugfixes
|
|
|
|
|
|
2014-12-02 13:45:22 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 2 12:44:35 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.2.0 update
|
|
|
|
|
- new features
|
|
|
|
|
- native support of bzip2ed SCAP files (file extension needs to be '.xml.bz2')
|
|
|
|
|
- improved performance on huge XML documents, especially DataStreams
|
|
|
|
|
- minimized use of temp files to absolute minimum
|
|
|
|
|
- added OVAL-5.11 release candidate schemas
|
|
|
|
|
- API changes
|
|
|
|
|
- overall 50 new symbols added to public API
|
|
|
|
|
- introduced oscap_source abstraction for input files
|
|
|
|
|
- further info: http://isimluk.livejournal.com/4859.html
|
|
|
|
|
- all the parsers converted to use oscap_source abstraction
|
|
|
|
|
- introduced ds_sds_session, high level API for playing with Source DataStreams
|
|
|
|
|
- introduced cpe_session, abstraction to approach multiple CPE resources
|
|
|
|
|
- introduced ds_rds_session, high level API for playing with Result DataStreams
|
|
|
|
|
(ARF files)
|
|
|
|
|
- deprecated dozens of API calls dependent on filepath
|
|
|
|
|
- introduced API for waivers (xccdf:override) and modification of ARF
|
|
|
|
|
- initial support for waivers in HTML Report
|
|
|
|
|
- dozens of small improvements
|
|
|
|
|
- maintenance
|
|
|
|
|
- dozens of small fixes
|
|
|
|
|
- dozens of memory leaks (whole test suite is now leak free)
|
|
|
|
|
- updated gnulib
|
2014-12-02 13:46:26 +01:00
|
|
|
- openscap-1.1.0-fix-bashisms.patch: upstreamed
|
2014-12-02 13:45:22 +01:00
|
|
|
|
2014-12-01 13:39:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 1 12:38:45 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.1.1 update
|
|
|
|
|
- Hint towards `oscap info` when profile is not found in oscap tool
|
|
|
|
|
- HTML report changes:
|
|
|
|
|
- Source OVAL results from ARF if available
|
|
|
|
|
- Highlight notchecked rules, treat them as rules that need attention
|
|
|
|
|
- HTML guide changes:
|
|
|
|
|
- Variable Substitution improvements
|
|
|
|
|
- Show benchmark title
|
|
|
|
|
- Show info about selected profile
|
|
|
|
|
- Avoid cdf12:notice, show only its contents
|
|
|
|
|
- bugfixes:
|
|
|
|
|
- improved handling of fqdn in XCCDF
|
|
|
|
|
- memory leaks
|
|
|
|
|
- static analysis fixes
|
|
|
|
|
|
2014-12-01 13:33:36 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Nov 29 01:11:00 UTC 2014 - Led <ledest@gmail.com>
|
|
|
|
|
|
|
|
|
|
- fix bashism in oscap-scan.cron script
|
|
|
|
|
- add patches:
|
|
|
|
|
* openscap-1.1.0-fix-bashisms.patch
|
|
|
|
|
|
2014-09-03 14:10:47 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Sep 3 12:09:10 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.1.0 update
|
|
|
|
|
- HTML report and guide redesign
|
|
|
|
|
- dropped support for docbook
|
|
|
|
|
- Introduced new probes (that are to be part of OVAL 5.11)
|
|
|
|
|
- probe_systemdunitproperty
|
|
|
|
|
- probe_systemdunitdependency
|
|
|
|
|
- introduced raw bindings for python3
|
|
|
|
|
- dozens of small bug fixes
|
|
|
|
|
|
2014-07-02 14:59:37 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 2 12:41:39 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.9 update
|
|
|
|
|
- xccdf_session_export_arf must not return 0 if the export failed
|
|
|
|
|
- expose xccdf_policy_get_value_of_item as public API
|
|
|
|
|
- skip "Signature" when parsing sds_index without spewing out an error
|
|
|
|
|
- return non-zero when cannot resolve XCCDF
|
|
|
|
|
- consider the last set-value as the effective set-value and export only one
|
|
|
|
|
- test suite fixes
|
|
|
|
|
- do not destroy SVG data in XCCDFs when generating guide or report
|
|
|
|
|
|
2014-06-20 11:02:46 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 19 14:19:09 UTC 2014 - crrodriguez@opensuse.org
|
|
|
|
|
|
2014-12-02 13:45:22 +01:00
|
|
|
- Remove unused build require on libnl-1_1 according to the
|
2014-06-20 11:02:46 +02:00
|
|
|
changelog, it stopped beign used in 2010
|
|
|
|
|
- libattr is also unused.
|
|
|
|
|
|
2014-03-28 14:27:20 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 28 13:19:22 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.8 update:
|
|
|
|
|
- fixes related to Asset Reporting Format
|
|
|
|
|
- Inject arf:report/@id into nested
|
|
|
|
|
rule-result/check/check-content-ref/@href
|
|
|
|
|
- Add hostname for each fqdn when generating ARF asset identification
|
|
|
|
|
data
|
|
|
|
|
- Add all MAC addresses from target-facts to ARF as asset
|
|
|
|
|
identification data
|
|
|
|
|
|
2014-03-21 13:47:33 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 21 12:46:34 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.7 update:
|
|
|
|
|
- fix namespaces for attributes in ARF relationship element
|
|
|
|
|
- Avoid ".00" as the score in HTML report when score is 0.
|
|
|
|
|
|
2014-03-19 10:17:18 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 19 09:09:20 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.6 update:
|
|
|
|
|
- fix process58 loginuid integer handling on 32bit
|
|
|
|
|
|
2014-03-17 08:13:53 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 17 07:06:35 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.5 update:
|
|
|
|
|
- XCCDF titles and description support xccdf:sub resolution
|
|
|
|
|
- HTML Report lists only applicable cpe platforms
|
|
|
|
|
- TestResult element contains applicable cpe platforms
|
|
|
|
|
- Introduced XCCDF 1.2 schematron validation
|
|
|
|
|
- XCCDF bug fixes
|
|
|
|
|
- tailoring profiles shall regards inherited refine-values (trac#373)
|
|
|
|
|
- rule-result now always includes at least one check
|
|
|
|
|
- Other bug fixes:
|
|
|
|
|
- Dpkginfo probe collects epoch in evr
|
|
|
|
|
- Updated examplary openscap-content based on the latest facts from
|
|
|
|
|
Red Hat Enterprise Linux 6
|
|
|
|
|
- Minor changes
|
|
|
|
|
|
2014-02-14 11:23:10 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 14 10:21:47 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.4 update:
|
|
|
|
|
- Introduced xccdf_tailoring_remove_profile to API
|
|
|
|
|
- OVAL bug fixes
|
|
|
|
|
|
2014-01-14 17:43:45 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 14 16:42:51 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.3 update:
|
|
|
|
|
- bug fixes
|
|
|
|
|
- a few coverity issues
|
|
|
|
|
- a few memory leak plugs
|
|
|
|
|
- broken comparison of huge integet in OVAL
|
2014-01-14 18:14:46 +01:00
|
|
|
- fix-return.patch: removed, has upstream fix
|
2014-01-14 17:43:45 +01:00
|
|
|
|
2014-01-10 11:26:02 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 10 10:25:19 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.2 update:
|
|
|
|
|
- XCCDF generate fix now supports tailoring file
|
|
|
|
|
- XCCDF bug fixes
|
|
|
|
|
- Generate guide points to RHSA pages (rhbz#1018291)
|
|
|
|
|
- Generate report ommits remediation when assesment passed
|
|
|
|
|
(rhbz#1029879)
|
|
|
|
|
- $PATH variable is available for SCE checks (rhbz#1026833)
|
|
|
|
|
- Tailoring of top-level Group elements via API fixed
|
|
|
|
|
- Fix-filtering should not drop fixes (affected SSG)
|
|
|
|
|
- Generated fix file is created with sane permissions (trac#362)
|
|
|
|
|
- Inherit parent's namespace when exporting oscap_text with HTML
|
|
|
|
|
trait
|
|
|
|
|
- OVAL bug fixes:
|
|
|
|
|
- Handful of xinetd probe fixes
|
|
|
|
|
- Handful of process and process58 fixes
|
|
|
|
|
- Obsoleted textfilecontent now supports text ent comparisons
|
|
|
|
|
- rpm*_item/epoch is reported as '(none)' when needed
|
|
|
|
|
- Fixed dozen of flaws in ipv4 and ipv6_address comparison
|
|
|
|
|
(CIDR handling)
|
|
|
|
|
- Made integer and floating type number parsing much stricter
|
|
|
|
|
- Fixed floating point numbers comparisons (trac#366)
|
|
|
|
|
- Fixed case-insensitive comparisons
|
|
|
|
|
- Item filtering fixes in probes
|
|
|
|
|
- Consolidated some of comparisons in results model and probes
|
|
|
|
|
(trac#367)
|
|
|
|
|
- Other bug fixes:
|
|
|
|
|
- Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248)
|
|
|
|
|
- Fixed static build (--disable-shared)
|
|
|
|
|
- Format assertions (-Werror=format-security) turned on by default
|
|
|
|
|
- SCE scripts are notified when parent (oscap) is killed
|
|
|
|
|
- oscap info now recognizes all the document types
|
|
|
|
|
(adeded: tailoring & CVE)
|
|
|
|
|
- Documentation improvements
|
|
|
|
|
- Handful of other minor fixes
|
2014-01-10 12:01:03 +01:00
|
|
|
- fix-return.patch: Fixed a void return
|
2014-01-10 11:26:02 +01:00
|
|
|
|
2013-12-02 17:54:33 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 2 16:53:56 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- move the gconf probe to openscap-extra-probes to reduce
|
|
|
|
|
dependencies of the core probe set.
|
|
|
|
|
|
2013-11-28 13:57:38 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 28 12:57:03 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.1 update:
|
|
|
|
|
- versioned interface is used to handle internal SCE plug-in
|
|
|
|
|
- build-in gnulib package was updated to current version
|
|
|
|
|
- bug fixes:
|
|
|
|
|
- selinux_domain_label and posix_capability properties
|
|
|
|
|
were reintroduced to OVAL system characteristics model
|
|
|
|
|
- selinux_domain_label now collects the domain/type
|
|
|
|
|
(not the context)
|
|
|
|
|
- oscap oval collect reports progress on stdout (not on the stderr)
|
|
|
|
|
- typo in the manual page (rhbz#1032537), and another small
|
|
|
|
|
clarification
|
|
|
|
|
|
2013-11-19 13:51:39 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 19 12:50:35 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- openscap-1.0.0 / 19-11-2013
|
|
|
|
|
- Improved heuristic to distinguish 'local' and 'remote' file systems
|
|
|
|
|
- Improved comparison of EntityStateEVRStringType (trac#355)
|
|
|
|
|
- Link against librpm (if available) to include rpmvercmp
|
|
|
|
|
(on other platforms we fall back to the build-in rpmvercmp)
|
|
|
|
|
- Bug fixes
|
|
|
|
|
|
|
|
|
|
- openscap-0.9.13 / 08-11-2013
|
|
|
|
|
- Moved SCE to separate shared library (libopenscap_sce.so)
|
|
|
|
|
- Introduction of scap-as-rpm tool
|
|
|
|
|
- Improvements of sql and sql57 probes
|
|
|
|
|
- Improvements of SELinux policy
|
|
|
|
|
- Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf)
|
|
|
|
|
- Minor improvements in state_entity processing
|
|
|
|
|
- Introduction of CPE name for Fedora 21 to the internal dictionary
|
|
|
|
|
- Added support for ind-def:pid/@xsi:nil (rhbz#1013011)
|
|
|
|
|
- Improved error reporting
|
|
|
|
|
- Bug fixes
|
|
|
|
|
- Changed CPE name regex to be more permissive
|
|
|
|
|
- avoided reports from the library to the stdout and stderr
|
|
|
|
|
- plugged several memory leaks
|
|
|
|
|
- improved xccdf:check-content-refs processing
|
|
|
|
|
- misspelling in syslog message (rhbz#1021695)
|
|
|
|
|
- fixed OVAL's <field> element processing
|
|
|
|
|
- fixes based on static analysers
|
|
|
|
|
- test suite is locale independent
|
2013-11-19 15:21:52 +01:00
|
|
|
- new library major version 8
|
2013-11-19 13:51:39 +01:00
|
|
|
|
2013-10-11 15:24:48 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 11 13:10:42 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- Updated to 0.9.12
|
|
|
|
|
- tailoring improvements (@id, version, and benchmark ref attributes)
|
|
|
|
|
- XCCDF 1.1 tailoring extension
|
|
|
|
|
- improved robustness of CPE dictionary parser and exporter
|
|
|
|
|
- and added misc CPE 2.3 elements
|
|
|
|
|
- added Fedora 20 to internal CPE dictionary
|
|
|
|
|
- updated OVAL's results_to_html stylesheet from Mitre Corporation.
|
|
|
|
|
- profiles with duplicate selects (same @idref) now export correctly
|
|
|
|
|
- test improvements
|
|
|
|
|
- bug fixes
|
|
|
|
|
- fixed IPv6 export in TestResult/target-address
|
|
|
|
|
- consistently inject target-id-ref into TestResult in ARFs
|
|
|
|
|
- improved rpmdb manipulation (rhbz#999903)
|
|
|
|
|
- solaris build fixes
|
|
|
|
|
- spelling of name of default language fixed (oscap_text related)
|
|
|
|
|
- fixed CPE names matching (generalization vs. specialization)
|
|
|
|
|
|
2013-07-17 17:31:02 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 17 15:25:53 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- Updated to 0.9.11
|
|
|
|
|
- bugfixes
|
|
|
|
|
- Updated to 0.9.10
|
|
|
|
|
- bugfixes
|
|
|
|
|
- Updated to 0.9.9
|
|
|
|
|
- --oval-results also exports CPE OVAL results
|
|
|
|
|
- added --benchmark-id to select a component-ref by ID of Benchmark it's pointing to
|
|
|
|
|
- OVAL variable_instance processing (or so called value multiset) and the processing
|
|
|
|
|
of @variable_instance attribute to OVAL Result Definition, OVAL Result Test and
|
|
|
|
|
Collected Objects.
|
|
|
|
|
- improved test coverage of OVAL variable processing
|
|
|
|
|
- introduced new internal data type: oval_smc
|
|
|
|
|
- added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm
|
|
|
|
|
database offline mode
|
|
|
|
|
- bug fixes and dead code removal
|
|
|
|
|
|
2013-06-17 13:45:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 17 11:44:21 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.8
|
|
|
|
|
- added experimental support for offline mode scanning to the OVAL
|
|
|
|
|
check engine (i.e. scanning of virtual host disk images)
|
|
|
|
|
- improved OVAL variables processing
|
|
|
|
|
- bug fixes and dead code removal
|
|
|
|
|
|
2013-05-06 13:09:31 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat May 4 15:37:25 UTC 2013 - mc@suse.com
|
|
|
|
|
|
|
|
|
|
- fix build on SLE11 - possible 64Bit issue
|
2013-06-17 13:45:11 +02:00
|
|
|
- fix-missing-include.dif
|
2013-05-06 13:09:31 +02:00
|
|
|
|
2013-04-29 11:21:46 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 29 09:21:35 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.7
|
|
|
|
|
- bugfixes
|
|
|
|
|
|
2013-04-25 13:31:14 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Apr 25 11:28:31 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.6
|
|
|
|
|
- new command-line module added as preview: "oscap ds sds-add"
|
|
|
|
|
- improved xccdf:fix processing (support of DataStreams and CPE)
|
|
|
|
|
- internal selinux policy preview
|
|
|
|
|
- added Fedora 19 to default CPE dictionary
|
|
|
|
|
- bug fixes
|
|
|
|
|
|
2013-03-20 11:08:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 20 10:04:57 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.5
|
|
|
|
|
- oscap xccdf remediate (new oscap module which introduces offline
|
|
|
|
|
remediation; the remediation based on existing xccdf:testresult file)
|
|
|
|
|
- added support for sce into datastream (sce scripts can now be
|
|
|
|
|
embedded into the datastream file similarly as oval can)
|
|
|
|
|
- improved bash completion and documentation
|
|
|
|
|
- bug fixes
|
2013-03-21 10:35:54 +01:00
|
|
|
- bumped SOVERSION from 2 to 3.
|
2013-03-20 11:08:56 +01:00
|
|
|
|
2013-02-27 09:54:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 27 08:53:37 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.4
|
|
|
|
|
- high Level API
|
|
|
|
|
- improved Text Substitution Processing
|
|
|
|
|
- technical Preview of Online Remediation Execution
|
|
|
|
|
(the oscap xccdf eval --remediate)
|
|
|
|
|
- improved Library Internal Error Reporting.
|
|
|
|
|
- the oscap xccd export-oval-variables now support DataStreams.
|
|
|
|
|
- improved documentation
|
|
|
|
|
- improved schema files.
|
|
|
|
|
- tailoring file support
|
|
|
|
|
- profile shadowing support
|
|
|
|
|
- bug Fixes
|
2013-02-27 10:22:01 +01:00
|
|
|
- DOWNGRADED SOVERSION from 3 to 2.
|
2013-02-27 09:54:24 +01:00
|
|
|
|
2013-01-08 11:49:19 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 8 10:47:53 UTC 2013 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.3
|
|
|
|
|
- Embedded CPE dictionary (allows users to ommit --cpe argument)
|
|
|
|
|
- improvements of DataStream and CPE processing on RHEL5
|
|
|
|
|
- changed API of various functions in cpe_dict, benchmark and
|
|
|
|
|
xccdf_policy to use string timestamp instead of time_t [1]
|
|
|
|
|
- fixed several issues found by Coverity and cppcheck static code
|
|
|
|
|
analysis
|
|
|
|
|
- bug fixes
|
2013-01-08 12:16:23 +01:00
|
|
|
- bumped SOVERSION from 2 to 3.
|
2013-01-08 11:49:19 +01:00
|
|
|
|
2012-11-19 16:47:31 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 19 15:47:21 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.2:
|
|
|
|
|
- rewritten the heuristic for pattern matching on path and filepath
|
|
|
|
|
- CPE 2.3 language applicability testing
|
|
|
|
|
- new ds_sds_index API providing a datastream overview
|
|
|
|
|
- CPEs in source datastreams are automatically registered and used
|
|
|
|
|
for XCCDF evaluation
|
|
|
|
|
- --cpe option autodetects CPE dictionary and language
|
|
|
|
|
- CVE support (validate feed, print CVEs)
|
|
|
|
|
- introduced info module
|
|
|
|
|
- made "$oscap xccdf generate custom" work again -> man page update
|
|
|
|
|
- bug fixes
|
|
|
|
|
|
|
|
|
|
|
2012-10-25 16:28:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 25 14:26:53 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.1:
|
|
|
|
|
- the http in the check-content-ref/@hrefhref support
|
|
|
|
|
- the cpedict support
|
|
|
|
|
- obsoleted the oscap_reporter
|
|
|
|
|
- send start and finish messages to the syslog
|
|
|
|
|
- the XCCDF multi-check evaluation support
|
|
|
|
|
- "oscap oval validate-xml" autodetect a document type
|
|
|
|
|
- bug fixes
|
|
|
|
|
|
2012-09-28 09:55:55 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 28 07:54:36 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.9.0:
|
|
|
|
|
* few public headers were renamed to follow common schema
|
|
|
|
|
* cve and cce modules are not build by default -> these modules are not
|
|
|
|
|
utilized by oscap tool and thus untested.
|
|
|
|
|
* --enable-bindings configure option was split into --enable-python and
|
|
|
|
|
support of SCAP datastream support was improved
|
|
|
|
|
* plus fixes in OVAL and XCCDF modules. oscap tool reports support of
|
|
|
|
|
XCCDF 1.2 and OVAL 5.10.1
|
2012-09-28 10:02:10 +02:00
|
|
|
- libopenscap.so major version changed from 1 to 2.
|
2012-09-28 09:55:55 +02:00
|
|
|
|
2012-08-29 09:56:51 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 29 07:56:05 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.8.5:
|
|
|
|
|
- added rpmverifypackage probe
|
|
|
|
|
- added initial support for source and result datastreams
|
|
|
|
|
- added xccdf 1.2 dc-status support
|
|
|
|
|
- several probes were updated to conform to OVAL 5.10.1
|
|
|
|
|
- bug fixes
|
|
|
|
|
|
|
|
|
|
This release is able to evaluate the DISA STIG content.
|
|
|
|
|
|
2012-08-07 14:58:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 7 12:57:51 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- updated to 0.8.4
|
|
|
|
|
- added OVAL schemas 5.9, 5.10.1
|
|
|
|
|
- alloc.h is no more public api
|
|
|
|
|
- bug fixes
|
|
|
|
|
|
2012-08-04 09:37:50 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 3 09:00:36 UTC 2012 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix schema_version of scap-rhel6-oval.xml (to 5.8)
|
|
|
|
|
|
2012-08-01 11:43:48 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 1 09:43:28 UTC 2012 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- Updated to 0.8.3
|
|
|
|
|
- added XCCDF 1.2 schemas
|
|
|
|
|
- changed XCCDF report format
|
|
|
|
|
- updated schemas for OVAL 5.10
|
|
|
|
|
- added additional OVAL schemas - 5.3, 5.4, 5.5, 5.6, 5.7
|
|
|
|
|
- multi version support for XCCDF and OVAL
|
|
|
|
|
- a schema version of an imported and exported content is same
|
|
|
|
|
- added rpmverifyfile probe
|
|
|
|
|
- results are validated only if an OSCAP_FULL_VALIDATION variable is set
|
|
|
|
|
- bug fixes
|
|
|
|
|
|
2012-08-01 13:50:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 1 09:18:06 UTC 2012 - dmacvicar@suse.de
|
|
|
|
|
|
|
|
|
|
- add OVAL/XCCDF content based on yast2-security checks
|
|
|
|
|
and set them as the default content (using symlinks)
|
|
|
|
|
|
2012-07-28 16:30:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jul 28 14:24:46 UTC 2012 - aj@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix build with missing gets declaration (glibc 2.16)
|
|
|
|
|
|
2012-03-30 16:22:49 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 30 16:21:21 CEST 2012 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- Updated to 0.8.2
|
|
|
|
|
- XCCDF check-import support
|
|
|
|
|
- XSLT transformation for XCCDF 1.1 to 1.2 migration
|
|
|
|
|
- SCE reports now optionally use the new check-import functionality
|
|
|
|
|
and don't need separate SCE result files
|
|
|
|
|
- bug fixes
|
|
|
|
|
|
2012-03-26 11:33:19 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Mar 24 10:54:22 UTC 2012 - mc@suse.com
|
|
|
|
|
|
2012-08-01 11:43:48 +02:00
|
|
|
- require libnl-devel on older SUSE version
|
2012-03-26 11:33:19 +02:00
|
|
|
|
2012-03-20 13:49:59 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 19 15:52:17 UTC 2012 - cfarrell@suse.com
|
|
|
|
|
|
|
|
|
|
- license update: LGPL-2.1+
|
|
|
|
|
There is no GPL-3.0+ in this package. Also, the Fedora spec file states
|
|
|
|
|
LGPL-2.1+. This appears to be the correct license
|
|
|
|
|
|
2012-02-29 22:47:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Feb 29 22:47:20 CET 2012 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- some cleanups to make it factory acceptable
|
|
|
|
|
|
2012-02-28 23:36:15 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 28 17:52:44 CET 2012 - mc@suse.de
|
|
|
|
|
|
|
|
|
|
- Update to 0.8.1
|
|
|
|
|
- introduce Script Check Engine
|
|
|
|
|
- Added an OVAL Directives schema to allow for a tool
|
|
|
|
|
to supply a set of directives to more easily specify
|
|
|
|
|
desired results content.
|
|
|
|
|
- Enhanced OVAL Results directives to allow for more flexibility
|
|
|
|
|
in allowed results content
|
|
|
|
|
- added new OVAL objects(all OVAL 5.8 objects are covered now)
|
|
|
|
|
- update dpkgprobe
|
|
|
|
|
- all issues reported by coverity are fixed
|
|
|
|
|
- add capability to export OVAL Variables from XCCDF
|
|
|
|
|
- added cvss score calculator from vector
|
|
|
|
|
|
2011-04-29 15:56:47 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 29 15:56:23 CEST 2011 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- Updated to 0.7.2
|
|
|
|
|
- OVAL 5.7 is supported
|
|
|
|
|
- content for Red Hat Enterprise Linux 6.1 - draft
|
|
|
|
|
- oscap tool enable user to skip content validation before evaluation
|
|
|
|
|
- bugfixes
|
|
|
|
|
|
2010-07-05 02:18:40 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 5 00:16:27 UTC 2010 - bitshuffler #suse@irc.freenode.org
|
|
|
|
|
|
|
|
|
|
- Update to 0.5.12
|
|
|
|
|
- Proper subpackages added
|
|
|
|
|
|
2009-11-19 13:51:01 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Nov 19 13:50:12 CET 2009 - meissner@suse.de
|
|
|
|
|
|
|
|
|
|
- initial 0.5.5 import
|
|
|
|
|
- open SCAP protocol implementation
|
2012-03-01 10:27:11 +01:00
|
|
|
|
