diff -Nru openscap-1.4.4+dfsg/debian/changelog openscap-1.4.4+dfsg/debian/changelog --- openscap-1.4.4+dfsg/debian/changelog 2026-09-05 00:51:12.000000000 +1200 +++ openscap-1.4.4+dfsg/debian/changelog 2026-10-08 15:50:38.000000000 +1300 @@ -1,3 +1,13 @@ +openscap (1.4.4+dfsg-3) UNRELEASED; urgency=medium + + * Ship oscap-run-sce-script in openscap-common instead of openscap-utils. + libopenscap runs SCE check scripts through it when a script is not + executable, as happens when /tmp is mounted noexec. With only + openscap-scanner installed, those checks ended in error. + (Closes: #1149128) + + -- Thomas Moore Thu, 08 Oct 2026 16:00:00 +1300 + openscap (1.4.4+dfsg-2) unstable; urgency=medium [ HÃ¥vard F. Aasen ] diff -Nru openscap-1.4.4+dfsg/debian/control openscap-1.4.4+dfsg/debian/control --- openscap-1.4.4+dfsg/debian/control 2026-09-05 00:51:12.000000000 +1200 +++ openscap-1.4.4+dfsg/debian/control 2026-10-08 15:35:29.000000000 +1300 @@ -127,8 +127,10 @@ ${misc:Depends}, Breaks: libopenscap8 (<< 1.3.5), + openscap-utils (<< 1.4.4+dfsg-3~), Replaces: libopenscap8 (<< 1.3.5), + openscap-utils (<< 1.4.4+dfsg-3~), Description: OpenSCAP schema files OpenSCAP is a set of open source libraries providing an easier path for integration of the SCAP line of standards. SCAP is a line of @@ -142,7 +144,8 @@ * Extensible Configuration Checklist Description Format (XCCDF) * Open Vulnerability and Assessment Language (OVAL) . - This package contains schema files. + This package contains schema files and the helper that runs SCE check + scripts which are not executable. Package: openscap-doc Section: doc diff -Nru openscap-1.4.4+dfsg/debian/openscap-common.install openscap-1.4.4+dfsg/debian/openscap-common.install --- openscap-1.4.4+dfsg/debian/openscap-common.install 2026-09-05 00:51:12.000000000 +1200 +++ openscap-1.4.4+dfsg/debian/openscap-common.install 2026-10-08 15:35:22.000000000 +1300 @@ -1 +1,2 @@ +usr/bin/oscap-run-sce-script usr/share/openscap/* diff -Nru openscap-1.4.4+dfsg/debian/openscap-utils.install openscap-1.4.4+dfsg/debian/openscap-utils.install --- openscap-1.4.4+dfsg/debian/openscap-utils.install 2026-09-05 00:51:12.000000000 +1200 +++ openscap-1.4.4+dfsg/debian/openscap-utils.install 2026-10-08 15:35:22.000000000 +1300 @@ -3,7 +3,6 @@ usr/bin/oscap-docker usr/bin/oscap-im usr/bin/oscap-podman -usr/bin/oscap-run-sce-script usr/bin/oscap-ssh usr/bin/oscap-vm usr/bin/scap-as-rpm