search

CESNET / pakiti-server

Pakiti provides a monitoring mechanism to check the patching status of Linux systems.
BSD 2-Clause "Simplified" License
49 stars 35 forks source link

Ubuntu CVEs are not being checked #170

Closed mgrosa closed 3 years ago

mgrosa commented 4 years ago

Hi, I am trying to use this tool to monitor the patching status of our Linux systems but we are having huge problems regarding Ubuntu systems.

The first problem is related with Ubuntu itself: they decided to start compressing their OVAL files instead of letting us download uncompressed ones... To handle this new situation I am using a script which wgets the compressed XML files and then decompresses them to the public location of my Pakiti server. EDIT: A better solution was proposed by @lucasnetau on his pull request #169.

Now, my Pakiti server has the uncompressed XML files but I am thinking that it is not processing them as it is supposed to because it doesn't update the "Last Check" status, contrary to what happens with Debian and CentOS, and it doesn't show any CVE on a clearly vulnerable server. image image

I have been searching for what may be the reason for this problems and I have found that it may be related with "an uncontrolled change in the Canonical OVAL structure".

Does anyone have any solution to this problem?

Thanks, Miguel Rosa

aleita commented 3 years ago

any news on this issue. I have the same problem here.

Screenshot 2021-06-04 at 14 28 20