Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News — October 1, 2008 Search
link to OVAL home page
  OVAL Language > Downloads > Version 5.5

Version 5.5 (Official)

This page provides information on proposed changes to the OVAL Language. All information about the new version is included in this centralized location. Read the Review Process.

Downloads

Includes downloads for the Version 5.5 Definition Schema, System Characteristics Schema, Results Schema, Variable Schema, and Documentation.

KEY
Complete Schema - has all documentation embedded and the Schematron mark-up.
Minimal Schema - includes the raw xml schema only.
Schematron - a schema that can provide additional validation of OVAL V5 documents.
Documentation pdf - includes element dictionaries, etc., which users can elect to view in a browser or save.
All files zip - all files zipped together to allow for one simple download.
xsd - a user can either right click to download the file or left click to open the file in their default viewer.

OVAL Definition Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
Independent xsd xsd html -
Apache xsd xsd html -
Apple Macintosh xsd xsd html -
Cisco CatOS xsd xsd html -
Cisco IOS xsd xsd html -
Cisco PixOS xsd xsd html -
FreeBSD xsd xsd html -
HP-UX xsd xsd html -
IBM AIX xsd xsd html -
Linux xsd xsd html -
Microsoft Windows xsd xsd html -
Sun Solaris xsd xsd html -
UNIX xsd xsd html -
Vmware ESX xsd xsd html -
 
 

OVAL System Characteristics Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
Independent xsd xsd html -
Apache xsd xsd html -
Apple Macintosh xsd xsd html -
Cisco CatOS xsd xsd html -
Cisco IOS xsd xsd html -
Cisco PixOS xsd xsd html -
FreeBSD xsd xsd html -
HP-UX xsd xsd html -
IBM AIX xsd xsd html -
Linux xsd xsd html -
Microsoft Windows xsd xsd html -
Sun Solaris xsd xsd html -
UNIX xsd xsd html -
Vmware ESX xsd xsd html -
 

OVAL Results Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
 

OVAL Variables Schema Downloads
File Name Complete Schema Minimal Schema Documentation Schematron
All Files zip zip zip zip
Core xsd xsd html -
Common xsd xsd html -
 

Example XML Stylesheets
File Name Description
results_to_html.xsl The results_to_html stylesheet converts an OVAL Results document into a more readable html format.
minimal_schema.xsl The minimal_schema stylesheet removes all annotation elements from the OVAL Schema leaving only the minimal schema.
element_dictionary.xsl The element_dictionary stylesheet creates documentation files from the OVAL Schema.
reference_mapping.xsl The reference_mapping stylesheet creates a map between each OVAL Definition in a document and a specified reference source.

New in Version 5.5

Version 5.5 of the OVAL Schema is a direct result of feedback from the OVAL Community. This will be a minor version change and should not require extensive development by tools that support earlier versions of the Language. Existing content will be forward compatible with the 5.4 schemas. The changes pending to the different schemas are outlined below. "Open" status means the item is under consideration or being worked upon, "Closed" status means that the item has been incorporated and work on it is completed, and "Suspended" status means that the item will not be included in this version but may be included in a future version.

Items addressed in this version include:

StatusItem Description
  • closed -- make sure minoccurs or maxoccurs appears in element dictionaries
  • closed -- add table to show how evaluation works related to the ExistenceEnumeration
  • closed -- add schematron to make the var_check attribute required when var_ref used
  • closed -- restrict operation via schematron for <xpath> entity to just equals
  • closed -- incorrect schematron mapping between default and string datatype
  • closed -- clarify version datatype documentation related to the use of different delimeter characters
  • closed -- fix error in entity names in user_sid_test
  • closed -- clarify intention of a .* pattern match with a trustee_sid entity
  • closed -- remove stale object_ref mention from ItemType documentation in SC schema
  • closed -- document what value the instance entity of a textfilecontent54_test starts at
  • closed -- document what happens if an individual component of a local_variable returns multiple values
  • closed -- enhanced documentation related to illegal datatype casting
  • closed -- definition of DatatypeEnumeration should be updated to base datatypes on XML Schema types
  • closed -- add a new PIX OS schema
  • closed -- add a new line test to the CatOS schema
  • closed -- add a function for comparing date-time strings
  • closed -- add a function for capturing a substring based on a regex
  • closed -- modification of the ios version_test
  • closed -- modification of the catos version test
  • closed -- add functions to support arithmetic operations: add, subtract, divide, multiply
  • closed -- add a new test around the WUA update search interface
  • closed -- fix errors found in schematron (submitted by Secure Elements)

    • Timeline for Version 5.5

    PLANNING DRAFT RELEASE CANDIDATE OFFICIAL
    24 July 2008 08 August 2008 10 September 2008 01 October 2008

    Status Reports on Version 5.5

    Status updates are included below. You may also review the Community Forum Archives for discussions about Version 5.5, or enter "Version 5.5" as a keyword search for a list of forum discussions about the new version.

    [2008-10-01]

    Version 5.5 has been officially release. Many thanks to all in the community that helped with this minor release.

    [2008-09-19]

    Based on the feedback from the community, some corrections regarding typos in certain schematron rules and in the pixos namespace have been made. A second release candiate (RC2) has been issued. As always, if there are any more issues found please report them to the community so they can be fixed before the official release.

    [2008-09-10]

    The release candidate for Version 5.5 has been submitted. Nothing new has been added since the last draft. At this point we ask that all members of the community fully test this version and verify that it is ready for the official release.

    [2008-08-27]

    A second draft of Version 5.5 has been released. This new draft includes the proposed WUA Update Searcher test in the Windows Schema as well as modifications to the Version test in both the IOS schema and the CatOS schema. In addition, new functions were added to the variable section of the core definition schema. These additions have caused us to push back the release candidate date to September 10 in order to give everyone a chance to review things.

    [2008-08-08]

    A first draft of Version 5.5 has been released. This includes the addition of a new schema for PIX OS (submitted by Hewlett-Packard). In addition, it includes some updated documentation, some modified tests for catos, and some updated schematron related to datatypes.

    [2008-07-24]

    Version 5.5 is currently in the planning stage. If you have any suggestions for changes that should be included, please send them to the OVAL Community.

     

    Page Last Updated: October 01, 2008
    Comments and questions on the proposed schemas are welcome on the OVAL Developer’s Forum, or to oval@mitre.org.

     

    OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

    The OVAL Web site is hosted by The MITRE Corporation.

    Copyright 2002-2008, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation.

    Contact oval@mitre.org for more information.
    Privacy policy
    Terms of use