[Open-scap] OpenSCAP 1.3.3

Evgeny Kolesnikov ekolesni at redhat.com
Sun May 3 19:37:45 UTC 2020


Hello!

We are proud to announce the OpenSCAP release 1.3.3. This release is
based on the main-1.3 branch, and it is backward-compatible
with 1.3.x releases.

Notable improvements in this release:
- a Python script that can be used for CLI tailoring (autotailor)
(thank you, Matěj Týč);
- timezone for XCCDF TestResult start and end time (thank you, Jan Černý);
- new yamlfilecontent independent probe (draft implementation),
  see the proposal https://github.com/OVAL-Community/OVAL/issues/91
  for additional information.

There are other changes as well, here is the list:
- Introduced `urn:xccdf:fix:script:kubernetes` fix type in XCCDF;
- Added ability to generate `machineconfig` fix;
- Detect ambiguous scan target (utils/oscap-podman);
- Fixed #170: The rpmverifyfile probe can't verify files from '/bin' directory;
- The data system_info probe return for offline and online modes is
consistent and actual;
- Prevent crashes when complicated regexes are executed in
textfilecontent58 probe;
- Fixed #1512: Severity refinement lost in generated guide;
- Fixed #1453: Pointer lost in Swig API;
- Evaluation Characteristics of the XCCDF report are now consistent
with OVAL entities;
  from system_info probe;
- Fixed filepath pattern matching in offline mode in textfilecontent58 probe;
- Fixed infinite recursion in systemdunitdependency probe;
- Fixed the case when CMake couldn't find libacl or xattr.h.

Also thanks to all our contributors, who helped to make this release.

Download:
https://github.com/OpenSCAP/openscap/archive/1.3.3.tar.gz

SHA512:
e230668cdf900a2f31ccabc20787dce6c4174740aa7d2cc7b91c1c095e2a5b73d81bb614aa767d2e51383b5472def360c4204e9a6c4c85110c58b9999566613e

Enjoy!

On behalf of OpenSCAP contributors

Evgenii Kolesnikov,
Red Hat, Inc.





More information about the Open-scap-list mailing list