openscap-1.3.5

CMakeLists.txt

@@ -23,15 +23,15 @@ endif()
 # See http://sources.redhat.com/autobook/autobook/autobook_91.html#SEC91 for details
 
 ## increment if the interface has additions, changes, removals.
-set(LT_CURRENT 28)
+set(LT_CURRENT 29)
 
 ## increment any time the source changes; set 0 to if you increment CURRENT
 set(LT_REVISION 0)
 
 ## increment if any interfaces have been added; set to 0
 ## if any interfaces have been changed or removed. removal has
 ## precedence over adding, so set to 0 if both happened.
-set(LT_AGE 3)
+set(LT_AGE 4)
 
 math(EXPR LT_CURRENT_MINUS_AGE "${LT_CURRENT} - ${LT_AGE}")
 

NEWS

@@ -1,3 +1,37 @@
+openscap-1.3.5                                                  23-04-2021
+  - New features
+    - Made schematron-based validation enabled by default for validate command of oval and xccdf modules
+    - Added SCAP 1.3 source data stream Schematron
+    - Added XML Signature Validation
+    - Added --enforce-signature option for eval, guide, and fix modules
+    - Added <content> entity support (OVAL/yamlfilecontent)
+    - Allowed to clamp mtime to SOURCE_DATE_EPOCH
+    - Added severity and role attributes
+    - Added support for requires/conflicts elements of the Rule and Group (XCCDF)
+    - Added Kubernetes remediation to HTML report
+  - Maintenance, bug fix
+    - Fixed CMake warnings
+    - Made 'gpfs', 'proc' and 'sysfs' filesystems non-local
+    - Fixed handling of '--arg=val'-styled common options
+    - Documented used environment variables
+    - Updated man page and help texts
+    - Added --skip-validation option synonym for --skip-valid
+    - Fixed behavior of StateType operator
+    - Fixed some of the coverity warnings
+    - Ignoring namespace in XPath expressions
+    - Fixed how oval_probe_ext_eval checks absence of the response from the probe (obtrusive data warning)
+    - Described SWID tags detection
+    - Improved documentation about --stig-viewer option
+    - File probe behaviour fixed (symlink traversal now behaves as defined by OVAL)
+    - Fixed multiple segfaults and broken test in --stig-viewer feature
+    - Added dpkg version comparison algorithm
+    - Pluged some memory leaks
+    - Fixed TestResult/benchmark/@href attribute
+    - Fixed memory allocation
+    - Fixed field names for cases where key selection section is followed by a set section (probes/yamfilecontent)
+    - Changing hard coded libperl path in favor of FindPerlLibs method
+    - Check local filesystems when using 'filepath' element
+
 openscap-1.3.4                                                  01-10-2020
   - New features
     - Add support for FreeBSD

release_tools/README.adoc

@@ -21,7 +21,7 @@ Put your GitHub token in the `.env` file, so it contains the following line:
 
 . Check out that the information within `versions.sh` is accurate.
 +
-OpenSCAP versions are supposed to have correct values from the previous build (see the step 6), but e.g. the `latest_fedora` and `latest_rhel` may need to be updated if work on a distribution with new version has begun.
+OpenSCAP versions are supposed to have correct values from the previous build (see the step 6).
 
 . Run `up_to_compliance_check.sh`.
 +

release_tools/versions.sh

@@ -1,6 +1,4 @@
 version=1.3.5
 previous_version=1.3.4
-latest_fedora=33
-latest_rhel=8
 
 version_major_minor="${version%.*}"