Changelog for libopenscap_sce8-1.2.9-148.1.x86_64.rpm :
Tue Apr 26 14:00:00 2016 abergmannAATTsuse.com
- openscap 1.2.9 release
- New features
- oscap-chroot - a tool for offline scanning of filesystems mounted at arbitrary paths
- enabled offline scanning in many probes
- support for SCE in data streams
- many improvements of verbose mode
- verbose messages can be written on stderr
- runlevel probe supports SUSE systems
- new upstream tests
- Maintenance
- a lot of refactoring
- fixes in various tests
- OCILs are correctly placed in datastreams (issue #364)
- oscap-vm can work with fusermount when guestunmount is not available
- fixed oscap-docker HTTP communication issues (issue #304)
- fixed oscap-docker tracebacks (issue #303, #317)
- fixed container mounting in oscap-docker (issue #329)
- added Fedora 25 CPE
- only non-empty profiles are built (rhbz#1256879, rhbz#1302230)
- fixed compiler errors on RHEL5 and SLES11
- fixed sorting of groups in HTML report (issue #342)
- fixed version/AATTtime and version/AATTupdate in XCCDF Benchmark
- fixed CPE definitions to work also in offline mode
- fixed sysctl probe (issue #258)
- fixed manual page for oscap-ssh (rhbz#1299969)
- updated user manuals and manual pages
- updated .gitignore

Wed Mar 23 13:00:00 2016 meissnerAATTsuse.com
- enable the SCE (script checking engine)
packaged in \"openscap-engine-sce\" subpackage.
- enable the CCE (Common Configuration Enumeration)

Tue Jan 19 13:00:00 2016 meissnerAATTsuse.com
- openscap 1.2.8 release
- Maintenance
- textfilecontent54_probe does not produce false positives on non-UTF files (rhbz #1285757)
- fixed oscap-docker
- small improvements in verbose mode
- oscap info module shows information about tailoring files
- fixed build with CCE (issue #264)
- fixed XCCDF score computation (issue #272)
- fixed segmentation fault in variable probe (issue #277)
- fixed broken support for OVAL directives
- fixed bash completion
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- new tests
- refactoring in datastream module
- many small bugfixes and typo fixes

Thu Dec 3 13:00:00 2015 meissnerAATTsuse.com
- openscap 1.2.7 release
- New features
- OVAL 5.11.1 fully supported
- oscap-vm - tool for offline scanning of virtual machines
- verbose mode
- added SLED, SLES and OpenSUSE CPE names
- show profile description in HTML report and guide
- group rules by PCI DSS identifier in HTML report
- preliminary support for Ansible Playbooks within xccdf:fix
- added \"How to contribute\" and \"Versioning\" documents
- Maintenance
- using bziped RHSA documents in oscap-docker
- fixed errors of sysctl probe
- fixed skip-valid option (issue #203)
- fixed segmentation faults in SCE content reporting (issue #231)
- fixed tracebacks of scap-as-rpm
- fixed invalid memory reads in rpmverifyfile probe (issue #212)
- updated README and user manual
- many small bugfixes and new tests
- openscap-new-inventory.patch: upstreamed
- fix-missing-include.dif: refreshed, 1 hunk upstream

Fri Oct 9 14:00:00 2015 meissnerAATTsuse.com
- openscap-new-inventory.patch: find out the CPE ids of
SUSE Linux Enterprise and openSUSE versions.

Mon Oct 5 14:00:00 2015 meissnerAATTsuse.com
- openscap 1.2.6 release
- New features
- introduced OpenSCAP user manual
- improved OVAL 5.11.1 support
- added OVAL 5.11.1 XSD schemas and schematrons
- support for core/platform schema versions
- support for check_existence attribute in state entities
- support for CIM datetime format
- amended behavior of mask attribute
- added support for remote .xml.bz2 files (use with --fetch-remote-resources)
- rewrote oscap-docker to python, deeper integration with Atomic Host
- introduced CPE name for Fedora 24 to the internal dictionary
- HTML report & guide
- results can be grouped by according to various aspects
- printing supported (interactive elements are now hidden when printing)
- table of content now shows only selected items (rule & groups)
- references to RHSA are presented as links to website (rhbz#1243808)
- Maintenance
- scap-as-rpm can now build source rpm packages (srpms) (trac#469)
- scap-as-rpm now supports python3
- refactored oval processing into oval_session structure
- many smaller bugfixes and new tests
- new openscap-docker subpackage

Mon Jul 6 14:00:00 2015 meissnerAATTsuse.com
- openscap-1.2.5 update
- maintenance
- smaller bugfixes
- plugged memory leaks
- fixed fresh static analysis (coverity) findings
- fixed shellcheck warnings
- fixes for Solaris platform

Mon Jun 22 14:00:00 2015 meissnerAATTsuse.com
- openscap-1.2.4 update
- new features
- OVAL 5.11 support 99.8% completed!
- new symlink probe introduced
- new process58 test capabilities
- added possible_value support for external variables
- added possible_restriction support for external variables
- improved IP address comparisons
- Added Scientific Linux CPEs
- Added oscap-docker tool
- Created man-page for oscap-ssh
- HTML changes
- improved visibility of selected XCCDF profile in guides and reports
- render rule-result/message contents in reports
- maintenance
- Tests now pass on ppc64 little endian arch (rhbz#1215220)
- partition probe now supports remount, bind and move mount options
- Patched NIST OVAL-5.11 schemas to be backward compatible with
OVAL-5.10 (rhbz#1220262)
- fixed scap-as-rpm to work with vintage python (2.6)
- better error reporting when a probe dies (i.e. due to OOM killer)
- dropped selinux policy from upstream (rhbz#1209969)
- fix segfault on invalid selectors (rhbz#1220944)
- solaris support patches: file-system zones, systeminfo improvements
- many smaller fixes and new tests

Sun May 3 14:00:00 2015 meissnerAATTsuse.com
- openscap-1.2.3 update
- new features
- oscap-ssh -- handy utility to run remote scan over ssh
- glob_to_regexp OVAL function added
- HTML changes
- show rationale elements
- show fixtext elements
- show Benchmark\'s front-matter, description and notices
- show warnings for Groups and Rules
- improved handling of multiple fixes within a single Rule
- scroll evaluation characteristic if they overflow
- maintenance
- OVAL 5.11 schema fixes
- Coverity and memory leak fixes
- skip transient files when traversing /proc (trac#457)

Tue Apr 7 14:00:00 2015 meissnerAATTsuse.com
- openscap-1.2.2 update
- new features
- OVAL 5.11 support turned on by default
- included OVAL 5.11 schematron rules
- DataStream can now contain OVAL 5.11
- `oscap ds sds-compose` now supports --skip-valid parameter
- HTML report changes
- Notably increased level of OVAL details
- Table of contents is now generated for HTML guides
- maitenance
- rhbz#1182242, rhbz#1159289 - AATTvar_check & AATTvar_ref exporting
- solaris build fixes
- xccdf:fix/instance processing fixes
- improved (none) epoch processing in rpm probe
- environmentvariable58 now emits warning messages when appropriate
- offline mode improvements
- other bugfixes

Mon Jan 12 13:00:00 2015 meissnerAATTsuse.com
- openscap-1.2.1 update
- API changes
- 5.11 schemas updated (from RC1 to gold)
- oscap_source_new_from_memory can take bzip2ed content
- HTML report changes
- severity bar is now reversed (left-to-right)
- maintenance
- rhbz#1165139 - fix probe cancelation
- dozen of bugfixes

Tue Dec 2 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.2.0 update
- new features
- native support of bzip2ed SCAP files (file extension needs to be \'.xml.bz2\')
- improved performance on huge XML documents, especially DataStreams
- minimized use of temp files to absolute minimum
- added OVAL-5.11 release candidate schemas
- API changes
- overall 50 new symbols added to public API
- introduced oscap_source abstraction for input files
- further info: http://isimluk.livejournal.com/4859.html
- all the parsers converted to use oscap_source abstraction
- introduced ds_sds_session, high level API for playing with Source DataStreams
- introduced cpe_session, abstraction to approach multiple CPE resources
- introduced ds_rds_session, high level API for playing with Result DataStreams
(ARF files)
- deprecated dozens of API calls dependent on filepath
- introduced API for waivers (xccdf:override) and modification of ARF
- initial support for waivers in HTML Report
- dozens of small improvements
- maintenance
- dozens of small fixes
- dozens of memory leaks (whole test suite is now leak free)
- updated gnulib
- openscap-1.1.0-fix-bashisms.patch: upstreamed

Mon Dec 1 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.1.1 update
- Hint towards `oscap info` when profile is not found in oscap tool
- HTML report changes:
- Source OVAL results from ARF if available
- Highlight notchecked rules, treat them as rules that need attention
- HTML guide changes:
- Variable Substitution improvements
- Show benchmark title
- Show info about selected profile
- Avoid cdf12:notice, show only its contents
- bugfixes:
- improved handling of fqdn in XCCDF
- memory leaks
- static analysis fixes

Sat Nov 29 13:00:00 2014 Led
- fix bashism in oscap-scan.cron script
- add patches:

* openscap-1.1.0-fix-bashisms.patch

Wed Sep 3 14:00:00 2014 meissnerAATTsuse.com
- openscap-1.1.0 update
- HTML report and guide redesign
- dropped support for docbook
- Introduced new probes (that are to be part of OVAL 5.11)
- probe_systemdunitproperty
- probe_systemdunitdependency
- introduced raw bindings for python3
- dozens of small bug fixes

Wed Jul 2 14:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.9 update
- xccdf_session_export_arf must not return 0 if the export failed
- expose xccdf_policy_get_value_of_item as public API
- skip \"Signature\" when parsing sds_index without spewing out an error
- return non-zero when cannot resolve XCCDF
- consider the last set-value as the effective set-value and export only one
- test suite fixes
- do not destroy SVG data in XCCDFs when generating guide or report

Thu Jun 19 14:00:00 2014 crrodriguezAATTopensuse.org
- Remove unused build require on libnl-1_1 according to the
changelog, it stopped beign used in 2010
- libattr is also unused.

Fri Mar 28 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.8 update:
- fixes related to Asset Reporting Format
- Inject arf:report/AATTid into nested
rule-result/check/check-content-ref/AATThref
- Add hostname for each fqdn when generating ARF asset identification
data
- Add all MAC addresses from target-facts to ARF as asset
identification data

Fri Mar 21 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.7 update:
- fix namespaces for attributes in ARF relationship element
- Avoid \".00\" as the score in HTML report when score is 0.

Wed Mar 19 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.6 update:
- fix process58 loginuid integer handling on 32bit

Mon Mar 17 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.5 update:
- XCCDF titles and description support xccdf:sub resolution
- HTML Report lists only applicable cpe platforms
- TestResult element contains applicable cpe platforms
- Introduced XCCDF 1.2 schematron validation
- XCCDF bug fixes
- tailoring profiles shall regards inherited refine-values (trac#373)
- rule-result now always includes at least one check
- Other bug fixes:
- Dpkginfo probe collects epoch in evr
- Updated examplary openscap-content based on the latest facts from
Red Hat Enterprise Linux 6
- Minor changes

Fri Feb 14 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.4 update:
- Introduced xccdf_tailoring_remove_profile to API
- OVAL bug fixes

Tue Jan 14 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.3 update:
- bug fixes
- a few coverity issues
- a few memory leak plugs
- broken comparison of huge integet in OVAL
- fix-return.patch: removed, has upstream fix

Fri Jan 10 13:00:00 2014 meissnerAATTsuse.com
- openscap-1.0.2 update:
- XCCDF generate fix now supports tailoring file
- XCCDF bug fixes
- Generate guide points to RHSA pages (rhbz#1018291)
- Generate report ommits remediation when assesment passed
(rhbz#1029879)
- $PATH variable is available for SCE checks (rhbz#1026833)
- Tailoring of top-level Group elements via API fixed
- Fix-filtering should not drop fixes (affected SSG)
- Generated fix file is created with sane permissions (trac#362)
- Inherit parent\'s namespace when exporting oscap_text with HTML
trait
- OVAL bug fixes:
- Handful of xinetd probe fixes
- Handful of process and process58 fixes
- Obsoleted textfilecontent now supports text ent comparisons
- rpm
*_item/epoch is reported as \'(none)\' when needed
- Fixed dozen of flaws in ipv4 and ipv6_address comparison
(CIDR handling)
- Made integer and floating type number parsing much stricter
- Fixed floating point numbers comparisons (trac#366)
- Fixed case-insensitive comparisons
- Item filtering fixes in probes
- Consolidated some of comparisons in results model and probes
(trac#367)
- Other bug fixes:
- Workaround libxml2 bug handling x509 xmldsig (gnomebz#350248)
- Fixed static build (--disable-shared)
- Format assertions (-Werror=format-security) turned on by default
- SCE scripts are notified when parent (oscap) is killed
- oscap info now recognizes all the document types
(adeded: tailoring & CVE)
- Documentation improvements
- Handful of other minor fixes
- fix-return.patch: Fixed a void return

Mon Dec 2 13:00:00 2013 meissnerAATTsuse.com
- move the gconf probe to openscap-extra-probes to reduce
dependencies of the core probe set.

Thu Nov 28 13:00:00 2013 meissnerAATTsuse.com
- openscap-1.0.1 update:
- versioned interface is used to handle internal SCE plug-in
- build-in gnulib package was updated to current version
- bug fixes:
- selinux_domain_label and posix_capability properties
were reintroduced to OVAL system characteristics model
- selinux_domain_label now collects the domain/type
(not the context)
- oscap oval collect reports progress on stdout (not on the stderr)
- typo in the manual page (rhbz#1032537), and another small
clarification

Tue Nov 19 13:00:00 2013 meissnerAATTsuse.com
- openscap-1.0.0 / 19-11-2013
- Improved heuristic to distinguish \'local\' and \'remote\' file systems
- Improved comparison of EntityStateEVRStringType (trac#355)
- Link against librpm (if available) to include rpmvercmp
(on other platforms we fall back to the build-in rpmvercmp)
- Bug fixes
- openscap-0.9.13 / 08-11-2013
- Moved SCE to separate shared library (libopenscap_sce.so)
- Introduction of scap-as-rpm tool
- Improvements of sql and sql57 probes
- Improvements of SELinux policy
- Amendments based on SCAP 1.2 Errata (sp800-126r2-errata-20120409.pdf)
- Minor improvements in state_entity processing
- Introduction of CPE name for Fedora 21 to the internal dictionary
- Added support for ind-def:pid/AATTxsi:nil (rhbz#1013011)
- Improved error reporting
- Bug fixes
- Changed CPE name regex to be more permissive
- avoided reports from the library to the stdout and stderr
- plugged several memory leaks
- improved xccdf:check-content-refs processing
- misspelling in syslog message (rhbz#1021695)
- fixed OVAL\'s element processing
- fixes based on static analysers
- test suite is locale independent
- new library major version 8

Fri Oct 11 14:00:00 2013 meissnerAATTsuse.com
- Updated to 0.9.12
- tailoring improvements (AATTid, version, and benchmark ref attributes)
- XCCDF 1.1 tailoring extension
- improved robustness of CPE dictionary parser and exporter
- and added misc CPE 2.3 elements
- added Fedora 20 to internal CPE dictionary
- updated OVAL\'s results_to_html stylesheet from Mitre Corporation.
- profiles with duplicate selects (same AATTidref) now export correctly
- test improvements
- bug fixes
- fixed IPv6 export in TestResult/target-address
- consistently inject target-id-ref into TestResult in ARFs
- improved rpmdb manipulation (rhbz#999903)
- solaris build fixes
- spelling of name of default language fixed (oscap_text related)
- fixed CPE names matching (generalization vs. specialization)

Wed Jul 17 14:00:00 2013 meissnerAATTsuse.com
- Updated to 0.9.11
- bugfixes
- Updated to 0.9.10
- bugfixes
- Updated to 0.9.9
- --oval-results also exports CPE OVAL results
- added --benchmark-id to select a component-ref by ID of Benchmark it\'s pointing to
- OVAL variable_instance processing (or so called value multiset) and the processing
of AATTvariable_instance attribute to OVAL Result Definition, OVAL Result Test and
Collected Objects.
- improved test coverage of OVAL variable processing
- introduced new internal data type: oval_smc
- added support for evaluating OVAL definitions against an RPM database, a.k.a. rpm
database offline mode
- bug fixes and dead code removal

Mon Jun 17 14:00:00 2013 meissnerAATTsuse.com
- updated to 0.9.8
- added experimental support for offline mode scanning to the OVAL
check engine (i.e. scanning of virtual host disk images)
- improved OVAL variables processing
- bug fixes and dead code removal

Sat May 4 14:00:00 2013 mcAATTsuse.com
- fix build on SLE11 - possible 64Bit issue
- fix-missing-include.dif

Mon Apr 29 14:00:00 2013 meissnerAATTsuse.com
- updated to 0.9.7
- bugfixes

Thu Apr 25 14:00:00 2013 meissnerAATTsuse.com
- updated to 0.9.6
- new command-line module added as preview: \"oscap ds sds-add\"
- improved xccdf:fix processing (support of DataStreams and CPE)
- internal selinux policy preview
- added Fedora 19 to default CPE dictionary
- bug fixes

Wed Mar 20 13:00:00 2013 meissnerAATTsuse.com
- updated to 0.9.5
- oscap xccdf remediate (new oscap module which introduces offline
remediation; the remediation based on existing xccdf:testresult file)
- added support for sce into datastream (sce scripts can now be
embedded into the datastream file similarly as oval can)
- improved bash completion and documentation
- bug fixes
- bumped SOVERSION from 2 to 3.

Wed Feb 27 13:00:00 2013 meissnerAATTsuse.com
- updated to 0.9.4
- high Level API
- improved Text Substitution Processing
- technical Preview of Online Remediation Execution
(the oscap xccdf eval --remediate)
- improved Library Internal Error Reporting.
- the oscap xccd export-oval-variables now support DataStreams.
- improved documentation
- improved schema files.
- tailoring file support
- profile shadowing support
- bug Fixes
- DOWNGRADED SOVERSION from 3 to 2.

Tue Jan 8 13:00:00 2013 meissnerAATTsuse.com
- updated to 0.9.3
- Embedded CPE dictionary (allows users to ommit --cpe argument)
- improvements of DataStream and CPE processing on RHEL5
- changed API of various functions in cpe_dict, benchmark and
xccdf_policy to use string timestamp instead of time_t [1]
- fixed several issues found by Coverity and cppcheck static code
analysis
- bug fixes
- bumped SOVERSION from 2 to 3.

Mon Nov 19 13:00:00 2012 meissnerAATTsuse.com
- updated to 0.9.2:
- rewritten the heuristic for pattern matching on path and filepath
- CPE 2.3 language applicability testing
- new ds_sds_index API providing a datastream overview
- CPEs in source datastreams are automatically registered and used
for XCCDF evaluation
- --cpe option autodetects CPE dictionary and language
- CVE support (validate feed, print CVEs)
- introduced info module
- made \"$oscap xccdf generate custom\" work again -> man page update
- bug fixes

Thu Oct 25 14:00:00 2012 meissnerAATTsuse.com
- updated to 0.9.1:
- the http in the check-content-ref/AATThrefhref support
- the cpedict support
- obsoleted the oscap_reporter
- send start and finish messages to the syslog
- the XCCDF multi-check evaluation support
- \"oscap oval validate-xml\" autodetect a document type
- bug fixes

Fri Sep 28 14:00:00 2012 meissnerAATTsuse.com
- updated to 0.9.0:

* few public headers were renamed to follow common schema

* cve and cce modules are not build by default -> these modules are not
utilized by oscap tool and thus untested.

* --enable-bindings configure option was split into --enable-python and
support of SCAP datastream support was improved

* plus fixes in OVAL and XCCDF modules. oscap tool reports support of
XCCDF 1.2 and OVAL 5.10.1
- libopenscap.so major version changed from 1 to 2.

Wed Aug 29 14:00:00 2012 meissnerAATTsuse.com
- updated to 0.8.5:
- added rpmverifypackage probe
- added initial support for source and result datastreams
- added xccdf 1.2 dc-status support
- several probes were updated to conform to OVAL 5.10.1
- bug fixes
This release is able to evaluate the DISA STIG content.

Tue Aug 7 14:00:00 2012 meissnerAATTsuse.com
- updated to 0.8.4
- added OVAL schemas 5.9, 5.10.1
- alloc.h is no more public api
- bug fixes

Fri Aug 3 14:00:00 2012 dmacvicarAATTsuse.de
- Fix schema_version of scap-rhel6-oval.xml (to 5.8)

Wed Aug 1 14:00:00 2012 meissnerAATTsuse.com
- Updated to 0.8.3
- added XCCDF 1.2 schemas
- changed XCCDF report format
- updated schemas for OVAL 5.10
- added additional OVAL schemas - 5.3, 5.4, 5.5, 5.6, 5.7
- multi version support for XCCDF and OVAL
- a schema version of an imported and exported content is same
- added rpmverifyfile probe
- results are validated only if an OSCAP_FULL_VALIDATION variable is set
- bug fixes

Wed Aug 1 14:00:00 2012 dmacvicarAATTsuse.de
- add OVAL/XCCDF content based on yast2-security checks
and set them as the default content (using symlinks)

Sat Jul 28 14:00:00 2012 ajAATTsuse.de
- Fix build with missing gets declaration (glibc 2.16)

Fri Mar 30 14:00:00 2012 meissnerAATTsuse.de
- Updated to 0.8.2
- XCCDF check-import support
- XSLT transformation for XCCDF 1.1 to 1.2 migration
- SCE reports now optionally use the new check-import functionality
and don\'t need separate SCE result files
- bug fixes

Sat Mar 24 13:00:00 2012 mcAATTsuse.com
- require libnl-devel on older SUSE version

Mon Mar 19 13:00:00 2012 cfarrellAATTsuse.com
- license update: LGPL-2.1+
There is no GPL-3.0+ in this package. Also, the Fedora spec file states
LGPL-2.1+. This appears to be the correct license

Wed Feb 29 13:00:00 2012 meissnerAATTsuse.de
- some cleanups to make it factory acceptable

Tue Feb 28 13:00:00 2012 mcAATTsuse.de
- Update to 0.8.1
- introduce Script Check Engine
- Added an OVAL Directives schema to allow for a tool
to supply a set of directives to more easily specify
desired results content.
- Enhanced OVAL Results directives to allow for more flexibility
in allowed results content
- added new OVAL objects(all OVAL 5.8 objects are covered now)
- update dpkgprobe
- all issues reported by coverity are fixed
- add capability to export OVAL Variables from XCCDF
- added cvss score calculator from vector

Fri Apr 29 14:00:00 2011 meissnerAATTsuse.de
- Updated to 0.7.2
- OVAL 5.7 is supported
- content for Red Hat Enterprise Linux 6.1 - draft
- oscap tool enable user to skip content validation before evaluation
- bugfixes

Mon Jul 5 14:00:00 2010 bitshuffler #suseAATTirc.freenode.org
- Update to 0.5.12
- Proper subpackages added

Thu Nov 19 13:00:00 2009 meissnerAATTsuse.de
- initial 0.5.5 import
- open SCAP protocol implementation