2019-09-24 14:18:56 |
Nobuto Murata |
bug |
|
|
added bug |
2019-09-30 07:57:35 |
Nobuto Murata |
attachment added |
|
openscap_1.2.16-1_1.2.16-2.debdiff https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/1845216/+attachment/5292704/+files/openscap_1.2.16-1_1.2.16-2.debdiff |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
nominated for series |
|
Ubuntu Xenial |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
bug task added |
|
openscap (Ubuntu Xenial) |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
nominated for series |
|
Ubuntu Disco |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
bug task added |
|
openscap (Ubuntu Disco) |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
nominated for series |
|
Ubuntu Eoan |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
bug task added |
|
openscap (Ubuntu Eoan) |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
nominated for series |
|
Ubuntu Bionic |
|
2019-10-04 13:41:04 |
Marc Deslauriers |
bug task added |
|
openscap (Ubuntu Bionic) |
|
2019-10-04 13:41:44 |
Marc Deslauriers |
openscap (Ubuntu Xenial): status |
New |
Confirmed |
|
2019-10-04 13:41:47 |
Marc Deslauriers |
openscap (Ubuntu Bionic): status |
New |
Confirmed |
|
2019-10-04 14:20:47 |
Marc Deslauriers |
openscap (Ubuntu Disco): status |
New |
Fix Released |
|
2019-10-04 14:20:50 |
Marc Deslauriers |
openscap (Ubuntu Eoan): status |
New |
Fix Released |
|
2019-10-04 15:15:45 |
Marc Deslauriers |
attachment added |
|
Minimal fix for bionic https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/1845216/+attachment/5294355/+files/openscap_1.2.15-1ubuntu0.1.debdiff |
|
2019-10-04 15:16:27 |
Marc Deslauriers |
attachment added |
|
Minimal fix for xenial https://bugs.launchpad.net/ubuntu/+source/openscap/+bug/1845216/+attachment/5294356/+files/openscap_1.2.8-1ubuntu0.2.debdiff |
|
2019-10-04 15:49:34 |
Mark Morlino |
description |
/usr/share/openscap/cpe/openscap-cpe-dict.xml is included in later versions such as 1.2.16-2:
https://packages.debian.org/buster/amd64/libopenscap8/filelist
How to reproduce with Ubuntu 18.04 LTS:
$ sudo apt install libopenscap8 ssg-debderived
$ oscap info /usr/share/scap-security-guide/ssg-ubuntu1604-ds.xml
Document type: Source Data Stream
Imported: 2017-08-11T09:18:08
...
Dictionaries:
Ref-Id: scap_org.open-scap_cref_output--ssg-ubuntu1604-cpe-dictionary.xml
OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284]
Failed to add default CPE to newly created CPE Session. [../../../src/CPE/cpe_session.c:58]
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: libopenscap8 1.2.15-1build1
ProcVersionSignature: User Name 4.15.0-58.64-generic 4.15.18
Uname: Linux 4.15.0-58-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.7
Architecture: amd64
Date: Tue Sep 24 14:13:09 2019
ProcEnviron:
TERM=screen-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=C.UTF-8
SHELL=/bin/bash
SourcePackage: openscap
UpgradeStatus: No upgrade log present (probably fresh install) |
[Impact]
The impact is fairly low because the problem can be mitigated by copying or linking a default cpe dictionary into place after installing. This prevents the error:
$ sudo ln -s /usr/share/scap-security-guide/ssg-ubuntu1604-cpe-dictionary.xml /usr/share/openscap/cpe/openscap-cpe-dict.xml
However, it would be better if it just worked correctly without requiring any manual steps after installation.
[Test Case]
The original description provides good instructions for reproducing under bionic:
$ sudo apt install libopenscap8 ssg-debderived
$ oscap info /usr/share/scap-security-guide/ssg-ubuntu1604-ds.xml
<snip>
OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284]
Failed to add default CPE to newly created CPE Session. [../../../src/CPE/cpe_session.c:58]
<snip>
[Regression Potential]
The likelyhood of a regression seems very low since this change provides a default cpe dictionary with the installation instead of requiring that one be manually copied into place after installation. In the event that this default cpe dictionary does somehow causes a regression, it could be mitigated by explicitly specifying a cpe dictionary rather than relying on the default or copying a new file over the default (which is basically what has to be done now to make the current oscap work correctly).
----- Original description ----
/usr/share/openscap/cpe/openscap-cpe-dict.xml is included in later versions such as 1.2.16-2:
https://packages.debian.org/buster/amd64/libopenscap8/filelist
How to reproduce with Ubuntu 18.04 LTS:
$ sudo apt install libopenscap8 ssg-debderived
$ oscap info /usr/share/scap-security-guide/ssg-ubuntu1604-ds.xml
Document type: Source Data Stream
Imported: 2017-08-11T09:18:08
...
Dictionaries:
Ref-Id: scap_org.open-scap_cref_output--ssg-ubuntu1604-cpe-dictionary.xml
OpenSCAP Error: Unable to open file: '/usr/share/openscap/cpe/openscap-cpe-dict.xml' [../../../src/source/oscap_source.c:284]
Failed to add default CPE to newly created CPE Session. [../../../src/CPE/cpe_session.c:58]
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: libopenscap8 1.2.15-1build1
ProcVersionSignature: User Name 4.15.0-58.64-generic 4.15.18
Uname: Linux 4.15.0-58-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.7
Architecture: amd64
Date: Tue Sep 24 14:13:09 2019
ProcEnviron:
TERM=screen-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=C.UTF-8
SHELL=/bin/bash
SourcePackage: openscap
UpgradeStatus: No upgrade log present (probably fresh install) |
|
2019-10-04 16:40:11 |
Marc Deslauriers |
bug |
|
|
added subscriber Marc Deslauriers |
2019-10-04 16:40:15 |
Marc Deslauriers |
openscap (Ubuntu Xenial): status |
Confirmed |
In Progress |
|
2019-10-04 16:40:18 |
Marc Deslauriers |
openscap (Ubuntu Bionic): status |
Confirmed |
In Progress |
|
2019-10-04 16:40:41 |
Marc Deslauriers |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2019-10-09 14:17:19 |
Mark Morlino |
bug |
|
|
added subscriber Mark Morlino |
2019-10-16 15:57:30 |
Robie Basak |
openscap (Ubuntu Bionic): status |
In Progress |
Fix Committed |
|
2019-10-16 15:57:34 |
Robie Basak |
bug |
|
|
added subscriber SRU Verification |
2019-10-16 15:57:38 |
Robie Basak |
tags |
amd64 apport-bug bionic uec-images |
amd64 apport-bug bionic uec-images verification-needed verification-needed-bionic |
|
2019-10-16 15:58:47 |
Robie Basak |
openscap (Ubuntu Xenial): status |
In Progress |
Fix Committed |
|
2019-10-16 15:58:52 |
Robie Basak |
tags |
amd64 apport-bug bionic uec-images verification-needed verification-needed-bionic |
amd64 apport-bug bionic uec-images verification-needed verification-needed-bionic verification-needed-xenial |
|
2019-10-18 16:00:31 |
Mark Morlino |
tags |
amd64 apport-bug bionic uec-images verification-needed verification-needed-bionic verification-needed-xenial |
amd64 apport-bug bionic uec-images verification-done-bionic verification-done-xenial verification-needed |
|
2019-10-18 16:01:14 |
Mark Morlino |
tags |
amd64 apport-bug bionic uec-images verification-done-bionic verification-done-xenial verification-needed |
amd64 apport-bug bionic uec-images verification-done verification-done-bionic verification-done-xenial |
|
2019-10-24 13:21:16 |
Łukasz Zemczak |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
2019-10-24 13:22:05 |
Launchpad Janitor |
openscap (Ubuntu Xenial): status |
Fix Committed |
Fix Released |
|
2019-10-24 13:31:19 |
Launchpad Janitor |
openscap (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
2022-07-08 16:27:24 |
BOBOZE |
bug |
|
|
added subscriber BOBOZE |