group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1845216@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package openscap - 1.2.15-1ubuntu0.1

---------------
openscap (1.2.15-1ubuntu0.1) bionic; urgency=medium

  * debian/patches/010-install-cpe-oval.patch: properly install CPE OVAL
    files. (LP: #1845216)

 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>  Fri, 04 Oct 2019
10:23:11 -0400

** Changed in: openscap (Ubuntu Bionic)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1845216

Title:
  OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe
  /openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284]

Status in openscap package in Ubuntu:
  Fix Released
Status in openscap source package in Xenial:
  Fix Released
Status in openscap source package in Bionic:
  Fix Released
Status in openscap source package in Disco:
  Fix Released
Status in openscap source package in Eoan:
  Fix Released

Bug description:
  [Impact]
  The impact is fairly low because the problem can be mitigated by copying or linking a default cpe dictionary into place after installing. This prevents the error:

  $ sudo ln -s /usr/share/scap-security-guide/ssg-ubuntu1604-cpe-
  dictionary.xml /usr/share/openscap/cpe/openscap-cpe-dict.xml

  
  However, it would be better if it just worked correctly without requiring any manual steps after installation.

  [Test Case]
  The original description provides good instructions for reproducing under bionic:
  $ sudo apt install libopenscap8 ssg-debderived
  $ oscap info /usr/share/scap-security-guide/ssg-ubuntu1604-ds.xml
  <snip>
  OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284]
  Failed to add default CPE to newly created CPE Session. [../../../src/CPE/cpe_session.c:58]
  <snip>

  [Regression Potential]
  The likelyhood of a regression seems very low since this change provides a default cpe dictionary with the installation instead of requiring that one be manually copied into place after installation. In the event that this default cpe dictionary does somehow causes a regression, it could be mitigated by explicitly specifying a cpe dictionary rather than relying on the default or copying a new file over the default (which is basically what has to be done now to make the current oscap work correctly).

  ----- Original description ----
  /usr/share/openscap/cpe/openscap-cpe-dict.xml is included in later versions such as 1.2.16-2:
  https://packages.debian.org/buster/amd64/libopenscap8/filelist

  How to reproduce with Ubuntu 18.04 LTS:

  $ sudo apt install libopenscap8 ssg-debderived

  $ oscap info /usr/share/scap-security-guide/ssg-ubuntu1604-ds.xml
  Document type: Source Data Stream
  Imported: 2017-08-11T09:18:08

  ...
  Dictionaries:
          Ref-Id: scap_org.open-scap_cref_output--ssg-ubuntu1604-cpe-dictionary.xml
  OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284]
  Failed to add default CPE to newly created CPE Session. [../../../src/CPE/cpe_session.c:58]

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: libopenscap8 1.2.15-1build1
  ProcVersionSignature: User Name 4.15.0-58.64-generic 4.15.18
  Uname: Linux 4.15.0-58-generic x86_64
  ApportVersion: 2.20.9-0ubuntu7.7
  Architecture: amd64
  Date: Tue Sep 24 14:13:09 2019
  ProcEnviron:
   TERM=screen-256color
   PATH=(custom, no user)
   XDG_RUNTIME_DIR=<set>
   LANG=C.UTF-8
   SHELL=/bin/bash
  SourcePackage: openscap
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/1845216/+subscriptions