Bug 1248378

Summary:	oscap does not handle non-decimal version of OVAL
Product:	Red Hat Enterprise Linux 6	Reporter:	Ján Rusnačko <jrusnack>
Component:	openscap	Assignee:	Šimon Lukašík <slukasik>
Status:	CLOSED ERRATA	QA Contact:	Marek Haicman <mhaicman>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.7	CC:	matyc, mhaicman, openscap-maint, qe-baseos-security, slukasik
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openscap-1.2.7-1.el6	Doc Type:	Bug Fix
Doc Text:	Cause: The XSD schemas released by NIST and shipped within OpenSCAP project did only allowed for OVAL versions in form of X.Y. While the latest release of OVAL language 5.11.1 is in form of X.Y.Z Consequence: Some OpenSCAP commands, like DataStream compose (oscap ds sds-compose) were not working for content of the latest OVAL version. Fix: XSD schema incorporated in OpenSCAP project has been amended to allow for all known OVAL versions. Result: All OpenSCAP operations work well with latest OVAL content.	Story Points:	---
Clone Of:	1248375	Environment:
Last Closed:	2016-05-10 20:53:23 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1202868, 1248375, 1248380
Bug Blocks:

Description Ján Rusnačko 2015-07-30 08:02:25 UTC

+++ This bug was initially created as a clone of Bug #1248375 +++

Description of problem:
oscap does not handle the non-decimal version of OVAL XMLs (e.g. 5.10.1) well:

File '/home/jrusnack/workspace/tmp/result.xml' line 6: Element
'{http://oval.mitre.org/XMLSchema/oval-common-5}schema_version': '5.10.1' is not
a valid value of the atomic type 'xs:decimal'. 


Version-Release number of selected component (if applicable):
1.1.1

Steps to Reproduce:
$ oscap ds sds-compose source.xml result.xml 

where source.xml is OVAL XML with 5.10.1 version

Comment 2 Šimon Lukašík 2015-07-31 08:36:09 UTC

Fixed in upstream, easy to backport.

Relevant upstream change: https://github.com/OpenSCAP/openscap/commit/0aa1a0d02046f26935aa0f3833e7edf531662237

Comment 5 Marek Haicman 2016-01-29 13:57:28 UTC

Verified fix on version openscap-1.2.8-1.el6

Comment 7 errata-xmlrpc 2016-05-10 20:53:23 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0806.html