[SRU] openscap 1.2.15 1.2.16 and 1.2.17 not able to build complianceascode
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
openscap (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Unassigned | ||
Jammy |
Fix Released
|
Undecided
|
Unassigned | ||
Kinetic |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Impact]
The openscap versions 1.2.15 1.2.16 and 1.2.17 are missing the patch https:/
Without this patch openscap isn't able to build ComplianceAsCode (https:/
This bugreport is the Ubuntu equivalent of https:/
The patch can be applied to all the mentioned versions.
The affected Ubuntu versions are:
18.04, 20.04, 22.04 and 22.10
The Ubuntu Security Team also needs this fix to better provide support on ComplianceAsCode and Ubuntu Security Guide
(USG: https:/
[Test Case]
Here is some instructions how to test it:
$ git clone https:/
$ cd content
$ ./build_product -j4 ubuntu1604 -o'5.11'
You will probably need to install some packages to be able to build it, for more information please check documentation for accurate version:
$ sudo apt-get install -y cmake make expat libopenscap8 libxml2-utils ninja-build python3-jinja2 python3-yaml xsltproc shellcheck ninja-build yamllint ansible-lint build-essential
As the above testing plan might be too burdensome, a better way to do it
is by running:
$ oscap xccdf eval --profile standard ssg-ubuntu1604-
The `ssg-ubuntu1604
[Where problems could occur]
The issue doesn't allow the build of USG/ComplianceA
[Other Info]
The issue affects all releases from Bionic to Kinetic.
summary: |
- openscap 1.2.15 1.2.16 and 1.2.17 not able to build complianceascode + [SRU] openscap 1.2.15 1.2.16 and 1.2.17 not able to build + complianceascode |
description: | updated |
tags: |
added: verification-done-bionic verification-done-focal verification-done-jammy verification-done-kinetic removed: verification-needed verification-needed-bionic verification-needed-focal verification-needed-jammy verification-needed-kinetic |
Changed in openscap (Ubuntu): | |
status: | New → Fix Released |
Hi Marina,
Thanks for reaching out. May I ask which product are you trying to build?
Ubuntu should be buildable as of now