Skip to Main Content

Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

BUG: Outdated Consolidated OVAL definitions (bzip) for OracleLinux

Michal SulekMar 11 2024

Hello, I wanted to scan my systems using openscap and found, that consolidated OVAL definitions (bz2) files are outdated in https://linux.oracle.com/security/oval/

Last update of OVAL definitions is 2024-02-14T22:45:12 for file com.oracle.elsa-ol9.xml.bz2, which is rather outdated. I checked also another files: com.oracle.elsa-ol7.xml.bz2 (last updated 2024-02-10), com.oracle.elsa-ol8.xml.bz2 (last updated 2024-03-04), com.oracle.elsa-2024.xml.bz2 (last updated 2024-02-10), com.oracle.elsa-all.xml.bz2 (last updated 2024-02-10), and all are also outdated. Please update OVAL definitions, so it is usable for vulnerability scanning.

PS: Individual OVAL definition files in https://linux.oracle.com/oval/ are up to date.

Comments
Post Details
Added on Mar 11 2024
0 comments
341 views