Openscap package too outdated

[Tyler Hicks]

On 07/06/2017 04:24 AM, Jesus Linares wrote:
> Thanks Tyler for clarifying.
> 
> I'm not expert on OpenSCAP or deb packages, so I'm not able to
> contribute with this update. But it is necessary because the package
> seems to be useless without OVAL 5.11.
> 
> Who created the current package?.

It was automatically imported from Debian.

It is also worth noting that the Ubuntu Security Team didn't receive the
contribution of the script to generate OVAL data until 2015, well after
14.04 was released.

Tyler

> 
> Thanks.
> Regards.
>  
> 
> On Thu, Jul 6, 2017 at 8:45 AM, Robie Basak <robie.basak at ubuntu.com
> <mailto:robie.basak at ubuntu.com>> wrote:
> 
>     On Wed, Jul 05, 2017 at 07:12:57PM -0500, Tyler Hicks wrote:
>     > I doubt anyone out there is making much use of the existing openscap in
>     > 14.04. If a newer version, such as what's in 16.04, was pulled back to
>     > trusty-updates, it might actually be useful.
>     >
>     > Note that I haven't looked at the changes between 14.04 and 16.04's
>     > openscap so I don't know how disruptive such a backport would be. I also
>     > don't have the time to prepare and test such a backport. I just wanted
>     > to elaborate on why Jesus is advocating for the backport as I feel like
>     > it could be something worth an exception to the usual SRU rules.
> 
>     Thank you for clarifying. Yes - that sounds like it might qualify for an
>     exception under the "change to the environment" qualification.
> 
>     Jesus: https://wiki.ubuntu.com/StableReleaseUpdates
>     <https://wiki.ubuntu.com/StableReleaseUpdates> still applies -
>     policies for exceptions are documented there also, along with the
>     procedure to follow if you are able to contribute this update.
> 
>     Thanks,
> 
>     Robie
> 
> 
> 
> 
> -- 
> *Jesus Linares*
> /IT Security Engineer/
> /
> /


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20170706/314eb4bf/attachment.sig>