Bug 2041781

Summary: Rebase OpenSCAP in RHEL 8.6 to the latest upstream version
Product: Red Hat Enterprise Linux 8 Reporter: Jan Černý <jcerny>
Component: openscapAssignee: Jan Černý <jcerny>
Status: CLOSED ERRATA QA Contact: Matus Marhefka <mmarhefk>
Severity: medium Docs Contact: Jan Fiala <jafiala>
Priority: unspecified    
Version: 8.6CC: ekolesni, jafiala, mhaicman
Target Milestone: rcKeywords: Rebase, Triaged
Target Release: 8.6Flags: pm-rhel: mirror+
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: openscap-1.3.6-3.el8 Doc Type: Enhancement
Doc Text:
.OpenSCAP rebased to 1.3.6 The OpenSCAP packages have been rebased to upstream version 1.3.6. This version provides various bug fixes and enhancements, most notably: * You can provide local copies of remote SCAP source data stream components by using the `--local-files` option. * OpenSCAP accepts multiple `--rule` arguments to select multiple rules on the command line. * OpenSCAP allows skipping evaluation of some rules using the `--skip-rule` option. * You can restrict memory consumed by OpenSCAP probes by using the `OSCAP_PROBE_MEMORY_USAGE_RATIO` environment variable. * OpenSCAP now supports the OSBuild Blueprint as a remediation type.
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-05-10 13:50:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1834716    

Description Jan Černý 2022-01-18 09:41:23 UTC
Description of problem:
Latest upstream version of OpenSCAP fixes bugs reported in RHEL and provides new features requested by customers and community. Namely:
- First boot remediation
- Option to use local DS components instead of remote components
It also fixes some issues reported upstream. The API/ABI is fully compatible with previous release shipped in RHEL 8.5.

Version-Release number of selected component (if applicable):
N/A

How reproducible:
always

Steps to Reproduce:
1. rpm -q openscap

Actual results:
old version of OpenSCAP is shipped in RHEL 8

Expected results:
OpenSCAP 1.3.6 or newer is shipped in RHEL 8.6

Additional info:
OpenSCAP 1.3.6 is expected to be released by the end of January 2022.

Comment 1 Evgeny Kolesnikov 2022-01-19 23:38:31 UTC
Upstream release: https://github.com/OpenSCAP/openscap/releases/tag/1.3.6

Comment 11 errata-xmlrpc 2022-05-10 13:50:09 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (openscap bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:1844