Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5364
| From | ultract <ultract@nsr.re.kr> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | RE: Openscap & rules "oval:org.debian.oval:obj:225" |
| Date | 2018-01-11 02:00 +0100 |
| Message-ID | <v6znP-1C2-1@gated-at.bofh.it> (permalink) |
| References | <v6uxP-6Hk-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
I guess "linux" is a name for a source package.
(You can check on debian security tracker site)
"linux-image-XXX" are names for binary packages like *.deb.
Regards
Junghwan Kang
-----Original Message-----
From: Poil [mailto:poil@quake.fr]
Sent: Thursday, January 11, 2018 4:38 AM
To: debian-security@lists.debian.org
Subject: Openscap & rules "oval:org.debian.oval:obj:225"
Hi,
On my servers oscap, with a oval database from https://www.debian.org/security/oval/, is unable to match
CVE-2017-5754/5753/5715
I have to patch the rule "oval:org.debian.oval:obj:225" in the OVAL DB, to have a match (linux to linux-image-amd64).
I don't understand why, there is no package named "linux" (...) Is anyone have a match without patching this rules ? Am I missing something ?
Best regards,
Poil
Patch
<dpkginfo_object id="oval:org.debian.oval:obj:225" version="1"
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<name>linux</name>
</dpkginfo_object>
to
<dpkginfo_object id="oval:org.debian.oval:obj:225" version="1"
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<name>linux-image-amd64</name>
</dpkginfo_object>
# dpkg -l "linux*"
ii linux-base 3.5 all Linux image base package un linux-doc-3.2 <none> (no description
available)
un linux-headers
<none> (no description
available)
un linux-headers-686-pae
<none> (no description
available)
un linux-headers-amd64
<none> (no description
available)
un linux-headers-generic
<none> (no description
available)
un linux-image <none> (no description available) un linux-image-2.6-amd64 <none> (no description
available)
un linux-image-2.6-openvz-amd64
<none> (no description
available)
un linux-image-2.6-vserver-amd64
<none> (no description
available)
un linux-image-2.6-xen-amd64
<none> (no description
available)
ii linux-image-3.2.0-4-amd64 3.2.65-1+deb7u2
amd64 Linux 3.2 for 64-bit PCs ii linux-image-amd64 3.2+46
amd64 Linux for 64-bit PCs (meta-package) un linux-initramfs-tool <none> (no description
available)
un linux-kernel-headers
<none> (no description
available)
un linux-kernel-log-daemon
<none> (no description
available)
un linux-latest-modules-3.2.0-4-amd64
<none> (no description
available)
ii linux-libc-dev:amd64 3.2.65-1+deb7u2
amd64 Linux support headers for userspace development un linux-modules-3.2.0-4-amd64 <none> (no description
available)
un linux32 <none> (no description available)
Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Openscap & rules "oval:org.debian.oval:obj:225" Poil <poil@quake.fr> - 2018-01-10 20:50 +0100
RE: Openscap & rules "oval:org.debian.oval:obj:225" ultract <ultract@nsr.re.kr> - 2018-01-11 02:00 +0100
Re: Openscap & rules "oval:org.debian.oval:obj:225" Poil <poil@quake.fr> - 2018-01-11 11:20 +0100
Re: Openscap & rules "oval:org.debian.oval:obj:225" ashijit pramanik <ashijit007@gmail.com> - 2018-01-11 11:50 +0100
Re: Openscap & rules "oval:org.debian.oval:obj:225" Poil <poil@quake.fr> - 2018-01-11 14:10 +0100
csiph-web