From 43fa6294ffe3dcaa7b5f81065f36c951ed47487088d8267962e97e20f7d5bed0 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Tue, 14 Jan 2020 13:44:42 +0000 Subject: [PATCH] - openscap 1.3.1 - the test suite and build scripts were improved to support Debian 10 - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; - the oscap-docker wrapper is no longer dependent on Atomic - Python binding are now more robust - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents - Support of multi-check rules has been improved across the whole workflow There are other changes as well, here is the list: * New features - Offline mode support for environmentvariable58 probe - The oscap-docker wrapper is available without Atomic + Maintenance, bug fixes - Improved support of multi-check rules (report, remediations, console output) - Improved HTML report look and feel, including printed version - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels - Probe rpmverifyfile uses and returns canonical paths - Improved a11y of HTML reports and guides - Fixes and improvements for SWIG Python bindings - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) - Fixed URL link mechanism for Red Hat Errata - New STIG Viewer URI: public.cyber.mil - Probe selinuxsecuritycontext would not check if SELinux is enabled - Scanner would provide information about unsupported OVAL objects - Added more tests for offline mode (probes, remediation) - #528 fixed: Eval SCE script when /tmp is in mode noexec - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage OBS-URL: https://build.opensuse.org/package/show/security/openscap?expand=0&rev=242 --- 1.3.2.tar.gz | 3 +++ openscap-1.3.1+git.20200110.tar.bz2 | 3 --- openscap.changes | 32 +++++++++++++++++++++++++++++ openscap.spec | 6 +++--- 4 files changed, 38 insertions(+), 6 deletions(-) create mode 100644 1.3.2.tar.gz delete mode 100644 openscap-1.3.1+git.20200110.tar.bz2 diff --git a/1.3.2.tar.gz b/1.3.2.tar.gz new file mode 100644 index 0000000..64ea506 --- /dev/null +++ b/1.3.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3ab3a8e9b4f1ec727fafe5d7325b34c6bc4b0ce87ac5ca42f5c965b6ee6c94bd +size 12360113 diff --git a/openscap-1.3.1+git.20200110.tar.bz2 b/openscap-1.3.1+git.20200110.tar.bz2 deleted file mode 100644 index 624e169..0000000 --- a/openscap-1.3.1+git.20200110.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0624c283f9a6da2cce858d1ccdbd52c6b375b158bd244d3ddc424eaafe63f5ae -size 7951975 diff --git a/openscap.changes b/openscap.changes index 64d096d..553588d 100644 --- a/openscap.changes +++ b/openscap.changes @@ -1,3 +1,35 @@ +------------------------------------------------------------------- +Tue Jan 14 13:43:11 UTC 2020 - Marcus Meissner + +- openscap 1.3.1 + - the test suite and build scripts were improved to support Debian 10 + - offline mode has received some love with a set of dedicated tests and various fixes in OVAL probes; + - the oscap-docker wrapper is no longer dependent on Atomic + - Python binding are now more robust + - HTML reports and guides, generated by the scanner, are now more accessible for non-visual rendering agents + - Support of multi-check rules has been improved across the whole workflow + + There are other changes as well, here is the list: + * New features + - Offline mode support for environmentvariable58 probe + - The oscap-docker wrapper is available without Atomic + + + Maintenance, bug fixes + - Improved support of multi-check rules (report, remediations, console output) + - Improved HTML report look and feel, including printed version + - Less clutter in verbose mode output; some warnings and errors demoted to verbose mode levels + - Probe rpmverifyfile uses and returns canonical paths + - Improved a11y of HTML reports and guides + - Fixes and improvements for SWIG Python bindings + - #1403 fixed: Scanner would not apply remediation for multicheck rules (verbosity) + - Fixed URL link mechanism for Red Hat Errata + - New STIG Viewer URI: public.cyber.mil + - Probe selinuxsecuritycontext would not check if SELinux is enabled + - Scanner would provide information about unsupported OVAL objects + - Added more tests for offline mode (probes, remediation) + - #528 fixed: Eval SCE script when /tmp is in mode noexec + - #1173, RHBZ#1603347 fixed: Double chdir/chroot in probe rpmverifypackage + ------------------------------------------------------------------- Sat Jan 11 17:24:21 UTC 2020 - Marcus Meissner diff --git a/openscap.spec b/openscap.spec index 6ba71ba..adc2bc0 100644 --- a/openscap.spec +++ b/openscap.spec @@ -25,11 +25,11 @@ %define with_bindings 0 Name: openscap -Version: 1.3.1+git.20200110 +Version: 1.3.2 Release: 0 -#Source: https://github.com/OpenSCAP/openscap/archive/%{version}.tar.gz +Source: https://github.com/OpenSCAP/openscap/archive/%{version}.tar.gz # temp snapshot to make it build with new RPM before 1.3.2 -Source: openscap-%version.tar.bz2 +#Source: openscap-%version.tar.bz2 Source1: openscap-rpmlintrc Source2: sysconfig.oscap-scan # SUSE specific profile, based on yast2-security checks.