{"ref":"refs/heads/main","before":"eeb3b7a7bf00431c5ad887c241dfaeb220fc413d","after":"d4e6d314451ad403c675a84395e522f207de1b6a","repository":{"id":19279199,"node_id":"MDEwOlJlcG9zaXRvcnkxOTI3OTE5OQ==","name":"openscap","full_name":"OpenSCAP/openscap","private":false,"owner":{"name":"OpenSCAP","email":null,"login":"OpenSCAP","id":7439934,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc0Mzk5MzQ=","avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=4","gravatar_id":"","url":"https://api.github.com/users/OpenSCAP","html_url":"https://github.com/OpenSCAP","followers_url":"https://api.github.com/users/OpenSCAP/followers","following_url":"https://api.github.com/users/OpenSCAP/following{/other_user}","gists_url":"https://api.github.com/users/OpenSCAP/gists{/gist_id}","starred_url":"https://api.github.com/users/OpenSCAP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OpenSCAP/subscriptions","organizations_url":"https://api.github.com/users/OpenSCAP/orgs","repos_url":"https://api.github.com/users/OpenSCAP/repos","events_url":"https://api.github.com/users/OpenSCAP/events{/privacy}","received_events_url":"https://api.github.com/users/OpenSCAP/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/OpenSCAP/openscap","description":"NIST Certified SCAP 1.2 toolkit","fork":false,"url":"https://api.github.com/repos/OpenSCAP/openscap","forks_url":"https://api.github.com/repos/OpenSCAP/openscap/forks","keys_url":"https://api.github.com/repos/OpenSCAP/openscap/keys{/key_id}","collaborators_url":"https://api.github.com/repos/OpenSCAP/openscap/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/OpenSCAP/openscap/teams","hooks_url":"https://api.github.com/repos/OpenSCAP/openscap/hooks","issue_events_url":"https://api.github.com/repos/OpenSCAP/openscap/issues/events{/number}","events_url":"https://api.github.com/repos/OpenSCAP/openscap/events","assignees_url":"https://api.github.com/repos/OpenSCAP/openscap/assignees{/user}","branches_url":"https://api.github.com/repos/OpenSCAP/openscap/branches{/branch}","tags_url":"https://api.github.com/repos/OpenSCAP/openscap/tags","blobs_url":"https://api.github.com/repos/OpenSCAP/openscap/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/OpenSCAP/openscap/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/OpenSCAP/openscap/git/refs{/sha}","trees_url":"https://api.github.com/repos/OpenSCAP/openscap/git/trees{/sha}","statuses_url":"https://api.github.com/repos/OpenSCAP/openscap/statuses/{sha}","languages_url":"https://api.github.com/repos/OpenSCAP/openscap/languages","stargazers_url":"https://api.github.com/repos/OpenSCAP/openscap/stargazers","contributors_url":"https://api.github.com/repos/OpenSCAP/openscap/contributors","subscribers_url":"https://api.github.com/repos/OpenSCAP/openscap/subscribers","subscription_url":"https://api.github.com/repos/OpenSCAP/openscap/subscription","commits_url":"https://api.github.com/repos/OpenSCAP/openscap/commits{/sha}","git_commits_url":"https://api.github.com/repos/OpenSCAP/openscap/git/commits{/sha}","comments_url":"https://api.github.com/repos/OpenSCAP/openscap/comments{/number}","issue_comment_url":"https://api.github.com/repos/OpenSCAP/openscap/issues/comments{/number}","contents_url":"https://api.github.com/repos/OpenSCAP/openscap/contents/{+path}","compare_url":"https://api.github.com/repos/OpenSCAP/openscap/compare/{base}...{head}","merges_url":"https://api.github.com/repos/OpenSCAP/openscap/merges","archive_url":"https://api.github.com/repos/OpenSCAP/openscap/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/OpenSCAP/openscap/downloads","issues_url":"https://api.github.com/repos/OpenSCAP/openscap/issues{/number}","pulls_url":"https://api.github.com/repos/OpenSCAP/openscap/pulls{/number}","milestones_url":"https://api.github.com/repos/OpenSCAP/openscap/milestones{/number}","notifications_url":"https://api.github.com/repos/OpenSCAP/openscap/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/OpenSCAP/openscap/labels{/name}","releases_url":"https://api.github.com/repos/OpenSCAP/openscap/releases{/id}","deployments_url":"https://api.github.com/repos/OpenSCAP/openscap/deployments","created_at":1398781414,"updated_at":"2026-10-21T11:47:32Z","pushed_at":1792583869,"git_url":"git://github.com/OpenSCAP/openscap.git","ssh_url":"git@github.com:OpenSCAP/openscap.git","clone_url":"https://github.com/OpenSCAP/openscap.git","svn_url":"https://github.com/OpenSCAP/openscap","homepage":"https://www.open-scap.org/tools/openscap-base","size":31989,"stargazers_count":1835,"watchers_count":1835,"language":"XSLT","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"has_discussions":true,"forks_count":454,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":62,"license":{"key":"lgpl-2.1","name":"GNU Lesser General Public License v2.1","spdx_id":"LGPL-2.1","url":"https://api.github.com/licenses/lgpl-2.1","node_id":"MDc6TGljZW5zZTEx"},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["compliance","cpe","data-stream","openscap","oval","scanning","scap","xccdf"],"visibility":"public","forks":454,"open_issues":62,"watchers":1835,"default_branch":"main","stargazers":1835,"master_branch":"main","organization":"OpenSCAP","custom_properties":{}},"pusher":{"name":"jan-cerny","email":"jcerny@redhat.com"},"forced":false,"organization":{"login":"OpenSCAP","id":7439934,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc0Mzk5MzQ=","url":"https://api.github.com/orgs/OpenSCAP","repos_url":"https://api.github.com/orgs/OpenSCAP/repos","events_url":"https://api.github.com/orgs/OpenSCAP/events","hooks_url":"https://api.github.com/orgs/OpenSCAP/hooks","issues_url":"https://api.github.com/orgs/OpenSCAP/issues","members_url":"https://api.github.com/orgs/OpenSCAP/members{/member}","public_members_url":"https://api.github.com/orgs/OpenSCAP/public_members{/member}","avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=4","description":"Open Source Security Compliance Solution"},"sender":{"login":"jan-cerny","id":9050916,"node_id":"MDQ6VXNlcjkwNTA5MTY=","avatar_url":"https://avatars.githubusercontent.com/u/9050916?v=4","gravatar_id":"","url":"https://api.github.com/users/jan-cerny","html_url":"https://github.com/jan-cerny","followers_url":"https://api.github.com/users/jan-cerny/followers","following_url":"https://api.github.com/users/jan-cerny/following{/other_user}","gists_url":"https://api.github.com/users/jan-cerny/gists{/gist_id}","starred_url":"https://api.github.com/users/jan-cerny/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jan-cerny/subscriptions","organizations_url":"https://api.github.com/users/jan-cerny/orgs","repos_url":"https://api.github.com/users/jan-cerny/repos","events_url":"https://api.github.com/users/jan-cerny/events{/privacy}","received_events_url":"https://api.github.com/users/jan-cerny/received_events","type":"User","user_view_type":"public","site_admin":false},"created":false,"deleted":false,"base_ref":null,"compare":"https://github.com/OpenSCAP/openscap/compare/eeb3b7a7bf00...d4e6d314451a","commits":[{"id":"5836ee506d1faf7fdcf79efd2e13dec5674a6918","tree_id":"cf852aa31f11ff004cca6e0f8ada1b344810f6b8","distinct":false,"message":"Evaluate OVAL state with no entities as true\n\nAccording to the OVAL specification, child entities in state elements\nhave minOccurs=0. A state without any entities imposes no conditions;\ntherefore, any collected system item vacuously satisfies it.\n\nPreviously, eval_item() in oval_resultTest.c would iterate over an empty\nlist of state contents, leaving the results structure empty. It then\npassed this empty set to ores_get_result_byopr(), which mapped it to\nOVAL_RESULT_UNKNOWN.\n\nThis caused a critical false negative with Canonical's Ubuntu OVAL feeds,\nwhich define singleton family_states with no child entities. Because the\ninventory check evaluated to unknown, every Ubuntu Security Notice (USN)\nextending that inventory definition failed to evaluate to true, reporting\nzero vulnerabilities and exiting cleanly with code 0.\n\nThis patch detects when an OVAL state contains no entities and immediately\nreturns OVAL_RESULT_TRUE. Also adds a regression test suite covering\nentity-less states and Ubuntu applicability check patterns.\n\nFixes #2396","timestamp":"2026-10-20T19:43:13+05:30","url":"https://github.com/OpenSCAP/openscap/commit/5836ee506d1faf7fdcf79efd2e13dec5674a6918","author":{"name":"Mohit","email":"mohitnehete6@gmail.com","date":"2026-10-20T19:43:13+05:30","username":"Mohit20057"},"committer":{"name":"Mohit","email":"mohitnehete6@gmail.com","date":"2026-10-20T19:43:13+05:30","username":"Mohit20057"},"added":["tests/API/OVAL/unittests/empty_state.xml","tests/API/OVAL/unittests/test_empty_state.sh"],"removed":[],"modified":["src/OVAL/results/oval_resultTest.c","tests/API/OVAL/unittests/CMakeLists.txt"]},{"id":"d4e6d314451ad403c675a84395e522f207de1b6a","tree_id":"0eba66413bf19a71820243056d5283fcffe8828a","distinct":true,"message":"Merge pull request #2452 from Mohit20057/fix-empty-state-eval\n\nEvaluate OVAL state with no entities as true (Fixes #2396)","timestamp":"2026-10-21T13:57:49+02:00","url":"https://github.com/OpenSCAP/openscap/commit/d4e6d314451ad403c675a84395e522f207de1b6a","author":{"name":"Jan Černý","email":"jcerny@redhat.com","date":"2026-10-21T13:57:49+02:00","username":"jan-cerny"},"committer":{"name":"GitHub","email":"noreply@github.com","date":"2026-10-21T13:57:49+02:00","username":"web-flow"},"added":["tests/API/OVAL/unittests/empty_state.xml","tests/API/OVAL/unittests/test_empty_state.sh"],"removed":[],"modified":["src/OVAL/results/oval_resultTest.c","tests/API/OVAL/unittests/CMakeLists.txt"]}],"head_commit":{"id":"d4e6d314451ad403c675a84395e522f207de1b6a","tree_id":"0eba66413bf19a71820243056d5283fcffe8828a","distinct":true,"message":"Merge pull request #2452 from Mohit20057/fix-empty-state-eval\n\nEvaluate OVAL state with no entities as true (Fixes #2396)","timestamp":"2026-10-21T13:57:49+02:00","url":"https://github.com/OpenSCAP/openscap/commit/d4e6d314451ad403c675a84395e522f207de1b6a","author":{"name":"Jan Černý","email":"jcerny@redhat.com","date":"2026-10-21T13:57:49+02:00","username":"jan-cerny"},"committer":{"name":"GitHub","email":"noreply@github.com","date":"2026-10-21T13:57:49+02:00","username":"web-flow"},"added":["tests/API/OVAL/unittests/empty_state.xml","tests/API/OVAL/unittests/test_empty_state.sh"],"removed":[],"modified":["src/OVAL/results/oval_resultTest.c","tests/API/OVAL/unittests/CMakeLists.txt"]}}