e17b830387
Upgrade Openscap tool to release 1.3.6, using the debianized version 1.3.6+dsfg-6 for the packaging files available at https://salsa.debian.org/debian/openscap/-/blob/debian/1.3.6+dfsg-6/debian/changelog Didn't change any files or patches. Segmentation faults during Openscap usage seen in Starlingx were fixed in this release of Openscap, and are the reason of this upgrade. Test Plan: PASS: Build iso. PASS: Deploy AIO-SX. PASS: Check version (oscap --version). Result should be 1.3.6. PASS: Run openscap using one of default manifests. There should be no segmentation fault issues. Command i.e.: "oscap xccdf eval --profile \ xccdf_org.ssgproject.content_profile_anssi_np_nt28_high \ --report controller-0-report.html \ /usr/share/xml/scap/ssg/content/ssg-debian11-ds-1.2.xml". Closes-Bug: 2006782 Signed-off-by: Marcelo de Castro Loebens <Marcelo.DeCastroLoebens@windriver.com> Change-Id: I34ff193227ae51ec709b7d69b6a97abc074721f3
237 lines
9.4 KiB
Plaintext
237 lines
9.4 KiB
Plaintext
Source: openscap
|
|
Section: admin
|
|
Priority: optional
|
|
Maintainer: Håvard F. Aasen <havard.f.aasen@pfft.no>
|
|
Build-Depends: cmake,
|
|
debhelper-compat (= 13),
|
|
dh-python,
|
|
libacl1-dev,
|
|
libapt-pkg-dev,
|
|
libattr1-dev,
|
|
libblkid-dev,
|
|
libbz2-dev,
|
|
libcap-dev [linux-any],
|
|
libcurl4-openssl-dev | libcurl4-gnutls-dev,
|
|
libdbus-1-dev,
|
|
libgcrypt-dev,
|
|
libglib2.0-dev,
|
|
libldap2-dev,
|
|
libopendbx1-dev,
|
|
libpcre3-dev,
|
|
libperl-dev,
|
|
libpopt-dev,
|
|
librpm-dev,
|
|
libselinux1-dev [linux-any],
|
|
libxml-parser-perl <!nocheck>,
|
|
libxml-xpath-perl <!nocheck>,
|
|
libxml2-dev,
|
|
libxmlsec1-dev,
|
|
libxslt1-dev,
|
|
libyaml-dev,
|
|
pkg-config,
|
|
python3-all-dev,
|
|
swig,
|
|
Build-Depends-Indep: asciidoc,
|
|
doxygen,
|
|
graphviz,
|
|
Standards-Version: 4.6.2
|
|
Rules-Requires-Root: no
|
|
Homepage: https://www.open-scap.org/
|
|
Vcs-Browser: https://salsa.debian.org/debian/openscap
|
|
Vcs-Git: https://salsa.debian.org/debian/openscap.git
|
|
|
|
Package: libopenscap-dev
|
|
Section: libdevel
|
|
Architecture: linux-any
|
|
Depends: libopenscap25 (= ${binary:Version}),
|
|
${misc:Depends},
|
|
Suggests: openscap-doc,
|
|
Description: libraries enabling integration of the SCAP line of standards - Development files
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains the development files for OpenSCAP.
|
|
|
|
Package: libopenscap25
|
|
Section: libs
|
|
Architecture: linux-any
|
|
Conflicts: libopenscap8,
|
|
Replaces: libopenscap8,
|
|
Pre-Depends: ${misc:Pre-Depends},
|
|
Depends: ${misc:Depends},
|
|
${shlibs:Depends},
|
|
Description: libraries enabling integration of the SCAP line of standards
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains libraries for OpenSCAP.
|
|
|
|
Package: python3-openscap
|
|
Section: python
|
|
Architecture: linux-any
|
|
Depends: libopenscap25 (= ${binary:Version}),
|
|
${misc:Depends},
|
|
${python3:Depends},
|
|
${shlibs:Depends},
|
|
Suggests: openscap-doc,
|
|
Provides: ${python3:Provides},
|
|
Description: libraries enabling integration of the SCAP line of standards - Python 3 bindings
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains the Python bindings for OpenSCAP.
|
|
|
|
Package: libopenscap-perl
|
|
Section: perl
|
|
Architecture: linux-any
|
|
Depends: libopenscap25 (= ${binary:Version}),
|
|
${misc:Depends},
|
|
${perl:Depends},
|
|
${shlibs:Depends},
|
|
Suggests: openscap-doc,
|
|
Description: libraries enabling integration of the SCAP line of standards - Perl bindings
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains the Perl bindings for OpenSCAP.
|
|
|
|
Package: openscap-scanner
|
|
Architecture: linux-any
|
|
Depends: libopenscap25 (= ${binary:Version}),
|
|
${misc:Depends},
|
|
${shlibs:Depends},
|
|
Recommends: openscap-common (= ${source:Version}),
|
|
Suggests: openscap-doc,
|
|
Description: OpenScap Scanner Tool (oscap)
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains oscap command-line tool, configuration and
|
|
vulnerability scanner. It can use for compliance checking with SCAP contents.
|
|
|
|
Package: openscap-utils
|
|
Architecture: linux-any
|
|
Depends: openscap-scanner (= ${binary:Version}),
|
|
rpm,
|
|
${misc:Depends},
|
|
${python3:Depends},
|
|
${shlibs:Depends},
|
|
Recommends: openscap-common (= ${source:Version}),
|
|
Suggests: openscap-doc,
|
|
Description: libraries enabling integration of the SCAP line of standards - Utility programs
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains command line utilities.
|
|
|
|
Package: openscap-common
|
|
Architecture: all
|
|
Multi-Arch: foreign
|
|
Depends: ${misc:Depends},
|
|
Breaks: libopenscap8 (<< 1.3.5),
|
|
Replaces: libopenscap8 (<< 1.3.5),
|
|
Description: OpenSCAP schema files
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains schema files.
|
|
|
|
Package: openscap-doc
|
|
Section: doc
|
|
Architecture: all
|
|
Multi-Arch: foreign
|
|
Depends: ${misc:Depends},
|
|
Description: libraries enabling integration of the SCAP line of standards - Documentation
|
|
OpenSCAP is a set of open source libraries providing an easier path
|
|
for integration of the SCAP line of standards. SCAP is a line of
|
|
standards managed by NIST with the goal of providing a standard language
|
|
for the expression of Computer Network Defense related information.
|
|
.
|
|
The intended scope of this project is to implement working interface
|
|
wrappers for parsing and querying SCAP content including:
|
|
* Common Vulnerabilities and Exposures (CVE)
|
|
* Common Configuration Enumeration (CCE)
|
|
* Common Platform Enumeration (CPE)
|
|
* Common Vulnerability Scoring System (CVSS)
|
|
* Extensible Configuration Checklist Description Format (XCCDF)
|
|
* Open Vulnerability and Assessment Language (OVAL)
|
|
.
|
|
This package contains documentation.
|