I made test with openscap 1.2.14 from Github on Xenial amd64.

   sudo apt-get purge libopenscap8
   cd /tmp
   sudo apt-get install build-essential cmake libqt4-dev libxslt1-dev 
libcurl4-openssl-dev libz-dev autoconf libtool libpcre3-dev asciidoctor git 
checkinstall libgcrypt-dev
   git clone https://github.com/OpenSCAP/openscap
   cd openscap
   git checkout maint-1.2
   ./autogen.sh
   ./configure --prefix /usr --disable-python --disable-util-oscap-docker
   make -j4
   sudo checkinstall make install # specified version 1.2.14
   oscap oval eval --results /tmp/results-xenial.xml --report 
/tmp/report-xenial.html /tmp/com.ubuntu.xenial.cve.oval.xml
   #...
   #Evaluation done.
   firefox /tmp/report-xenial.html

OVAL shema is 5.11.1, it reports 0 unpatched problems. It's great.
So we really need SRU for openscap package (see bug 1658529).
openscap-workbench is needed to be packaged too (see bug 1658492).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1658759

Title:
  oscap with com.ubuntu.xenial.cve.oval.xml wrongly reports many
  unpatched (and unknown) non-installed packages on Ubuntu Xenial
  16.04.1 LTS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/1658759/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to