Joe Orton wrote:
On Wed, Jan 23, 2008 at 03:53:38PM -0800, William Rowe wrote:
security/vulnerabilities-oval.xml
I'm ending up with deltas such as these...
-<httpd_state
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache";
id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
httpd is 1.3.1">
-<version operation="equals" datatype="version">1.3.1</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
id="oval:org.apache.httpd:ste:131" version="1" comment="the version of
httpd is 1.3.1">
+<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache";
operation="equals" datatype="version">1.3.1</version>
</httpd_state>
What component are we missing in site/lib/ or should I have locally
updated?
The fragment in the namespace URI is being dropped, odd. It works fine
for me. Does the patch below make any difference?
Index: xdocs/stylesheets/httpd-oval.xsl
===================================================================
--- xdocs/stylesheets/httpd-oval.xsl (revision 612495)
+++ xdocs/stylesheets/httpd-oval.xsl (working copy)
@@ -357,14 +357,14 @@
<!--
Print out the actual state element.
-->
- <xsl:element name="httpd_state"
namespace="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache";>
+ <httpd_state
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache";>
<xsl:attribute name="id"><xsl:value-of
select="$state_id"/></xsl:attribute>
<xsl:attribute name="version">1</xsl:attribute>
<xsl:attribute name="comment"><xsl:value-of
select="$state_comment"/></xsl:attribute>
<version datatype="version" operation="equals"
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache";>
<xsl:value-of select="@version"/>
</version>
- </xsl:element>
+ </httpd_state>
</xsl:template>
<!--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
<!--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -->
It creates a 100% delta to the file... the pattern on this box looks like
Index: docs/security/vulnerabilities-oval.xml
===================================================================
--- docs/security/vulnerabilities-oval.xml (revision 614738)
+++ docs/security/vulnerabilities-oval.xml (working copy)
@@ -719,7 +719,7 @@
</description>
<apache_httpd_repository>
<public>20060508</public>
-<reported></reported>
+<reported/>
<released>20060501</released>
<severity level="3">moderate</severity>
</apache_httpd_repository>
@@ -2775,225 +2775,225 @@
</definition>
</definitions>
<tests>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; i
d="oval:org.apache.httpd:tst:226" version="1" comment="the version of
httpd is 2
.2.6" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:226"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
id="oval
:org.apache.httpd:tst:226" version="1" comment="the version of httpd is
2.2.6" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
state_ref="ov
al:org.apache.httpd:ste:226"/>
</httpd_test>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; i
d="oval:org.apache.httpd:tst:225" version="1" comment="the version of
httpd is 2
.2.5" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:225"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
id="oval
:org.apache.httpd:tst:225" version="1" comment="the version of httpd is
2.2.5" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
state_ref="ov
al:org.apache.httpd:ste:225"/>
</httpd_test>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; i
d="oval:org.apache.httpd:tst:224" version="1" comment="the version of
httpd is 2
.2.4" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:224"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
id="oval
:org.apache.httpd:tst:224" version="1" comment="the version of httpd is
2.2.4" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
state_ref="ov
al:org.apache.httpd:ste:224"/>
</httpd_test>
-<httpd_test
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; i
d="oval:org.apache.httpd:tst:223" version="1" comment="the version of
httpd is 2
.2.3" check="at least one">
-<object object_ref="oval:org.apache.httpd:obj:1"/>
-<state state_ref="oval:org.apache.httpd:ste:223"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
id="oval
:org.apache.httpd:tst:223" version="1" comment="the version of httpd is
2.2.3" c
heck="at least one">
+<object
xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache"; objec
t_ref="oval:org.apache.httpd:obj:1"/>
+<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5";
state_ref="ov
al:org.apache.httpd:ste:223"/>
</httpd_test>
