Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News — July 24, 2008 Search
link to OVAL home page
  OVAL Language > Downloads > Version 5.4 (Official)

Version 5.4 (Official)

This page provides information about the current official version of the OVAL Language. All information about the version is included in this centralized location.

Downloads

Includes downloads for the Version 5.4 Definition Schema, System Characteristics Schema, Results Schema, Variable Schema, and Documentation.

KEY
Complete Schema - has all documentation embedded and the Schematron mark-up.
Minimal Schema - includes the raw xml schema only.
Schematron - a schema that can provide additional validation of OVAL V5 documents.
Documentation pdf - includes element dictionaries, etc., which users can elect to view in a browser or save.
All files zip - all files zipped together to allow for one simple download.
xsd - a user can either right click to download the file or left click to open the file in their default viewer.

OVAL Definition Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
Independent xsd xsd html -
Apache xsd xsd html -
Apple Macintosh xsd xsd html -
Cisco CatOS xsd xsd html -
Cisco IOS xsd xsd html -
FreeBSD xsd xsd html -
HP-UX xsd xsd html -
IBM AIX xsd xsd html -
Linux xsd xsd html -
Microsoft Windows xsd xsd html -
Sun Solaris xsd xsd html -
UNIX xsd xsd html -
Vmware ESX xsd xsd html -
 
 

OVAL System Characteristics Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
Independent xsd xsd html -
Apache xsd xsd html -
Apple Macintosh xsd xsd html -
Cisco CatOS xsd xsd html -
Cisco IOS xsd xsd html -
FreeBSD xsd xsd html -
HP-UX xsd xsd html -
IBM AIX xsd xsd html -
Linux xsd xsd html -
Microsoft Windows xsd xsd html -
Sun Solaris xsd xsd html -
UNIX xsd xsd html -
Vmware ESX xsd xsd html -
 

OVAL Results Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
 

OVAL Variables Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
 

Example XML Stylesheets
File Name Description
results_to_html.xsl The results_to_html stylesheet converts an OVAL Results document into a more readable html format.
minimal_schema.xsl The minimal_schema stylesheet removes all annotation elements from the OVAL Schema leaving only the minimal schema.
element_dictionary.xsl The element_dictionary stylesheet creates documentation files from the OVAL Schema.
reference_mapping.xsl The reference_mapping stylesheet creates a map between each OVAL Definition in a document and a specified reference source.

New in Version 5.4

Version 5.4 of the Official OVAL Language is a direct result of feedback from the OVAL Community. This will be a minor version change and hence should not require extensive development by tools that support earlier versions of the Language. Existing content will be forward compatible with the 5.4 schemas. The changes pending to the different schemas are outlined below.

Changes that have been made and are included in Version 5.4 of the OVAL Schema:

  • updated documentation
  • add symlinks to the behavior list for unix file recursion
  • enhanced schematron rules
  • fixed bug with value entity of activedirectory_state, set maxOccurs = unbounded
  • fixed schematron rules for volume_state in windows schema
  • fixed bug with windows sid_state where trustee_domain was incorrectly set to unbounded
  • added schema for AIX (submitted by Hewlett-Packard)
  • added schema for CatOS (submitted by Hewlett-Packard)
  • added schema for Vmware ESX (submitted by Hewlett-Packard)
  • updated result tables for ExistenceEnumeration in common schema
  • fixed schematron error related to 'value' entity of environmentvariable_state (independent-definitions-schema
  • updated system characateristics documentation related to datatype
  • added a keyref to enforce the existence of an extended definition in full results
  • added schematron to validate that the datatype of a var is the same as teh var_ref
  • added the smf_test (solaris schema)
  • fix the keyref in the variable schema that enforces ids to be unique
  • added a supersedence behavior to the HP-UX patch test.
  • added a supersedence behavior to the Solaris patch test.
  • added a fileset_version datatype related to the version string of HP-UX filesets.
  • added the 'case insensitive equals' and 'case insensitive not equal' operations.
  • new version of textfilecontent test to add multiline add multi-instance
  • added new tests in the Windows schema for users, groups, and sids with the obj based on trustee_sid

Timeline for Version 5.4

PLANNING DRAFT RELEASE CANDIDATE OFFICIAL
13 November 2007
 9 January 2008
 7 March 2008
 10 April 2008

Status Reports on Version 5.4

Status updates are included below. You may also review the Developer List Archives for discussions about Version 5.4, or enter "Version 5.4" as a keyword search for a list of forum discussions about the new version.

[2008-04-10]

Version 5.4 is now the official version of the OVAL schema.

[2008-03-20]

A second release candidate has been issued. This adds three new tests to the windows schema. These tests are bascially copies of the existing users, groups, and sid tests with the difference being that the new object is based off of the trustee_sid instead of the trustee_name.

[2008-03-07]

With the work around Version 5.4 slowing as we have come to consensus related to the issues at hand, a release candidate is appropriate. No significant changes have been made since the last draft. The expectation is that this release candidate will become the official release. At this time, we expect vendors to begin integrating Version 5.4 into their tools in preparation for the upcoming release.

[2008-02-22]

The second draft for Version 5.4 has been posted. This draft incorporates many small suggestions that have been proposed by the community. Including the addition of case insensitive operations, an imporved textfilecontent_test, and a new supersedence behavior for patch tests.

[2008-01-09]

The first draft for Version 5.4 has been posted. This draft incorporates 3 new schemas (aix, catos, and vmware esx) as well as fixing a number of small bugs in the schematron code throughout. Additional changes are being worked on and will be included in a future draft. Please check back to this page in the future for details.

[2007-11-13]

Version 5.4 is currently in the planning stage. It will be a small change that updates some of the documentation, adds new community requested tests, and fixes some errors found in the the schemas. As a minor version change Version 5.4 will not invalidate existing content that currently validates against Version 5.3, thus it should not require any major reworking of existing tools already compatible with version 5.3.

 

Page Last Updated: March 26, 2008
Comments and questions on the proposed schemas are welcome on the OVAL Developer's List, or to oval@mitre.org.

 

OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

The OVAL Web site is hosted by The MITRE Corporation.

Copyright 2002-2008, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation.

Contact oval@mitre.org for more information.
Privacy policy
Terms of use