{"ref":"refs/heads/maint-1.3","before":"8042af41ca2e4b635885f0e75a34c1e72bc911cf","after":"416c13457b23ca81a693879cef4d535d29222b2b","repository":{"id":19279199,"node_id":"MDEwOlJlcG9zaXRvcnkxOTI3OTE5OQ==","name":"openscap","full_name":"OpenSCAP/openscap","private":false,"owner":{"name":"OpenSCAP","email":null,"login":"OpenSCAP","id":7439934,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc0Mzk5MzQ=","avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=4","gravatar_id":"","url":"https://api.github.com/users/OpenSCAP","html_url":"https://github.com/OpenSCAP","followers_url":"https://api.github.com/users/OpenSCAP/followers","following_url":"https://api.github.com/users/OpenSCAP/following{/other_user}","gists_url":"https://api.github.com/users/OpenSCAP/gists{/gist_id}","starred_url":"https://api.github.com/users/OpenSCAP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OpenSCAP/subscriptions","organizations_url":"https://api.github.com/users/OpenSCAP/orgs","repos_url":"https://api.github.com/users/OpenSCAP/repos","events_url":"https://api.github.com/users/OpenSCAP/events{/privacy}","received_events_url":"https://api.github.com/users/OpenSCAP/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/OpenSCAP/openscap","description":"NIST Certified SCAP 1.2 toolkit","fork":false,"url":"https://api.github.com/repos/OpenSCAP/openscap","forks_url":"https://api.github.com/repos/OpenSCAP/openscap/forks","keys_url":"https://api.github.com/repos/OpenSCAP/openscap/keys{/key_id}","collaborators_url":"https://api.github.com/repos/OpenSCAP/openscap/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/OpenSCAP/openscap/teams","hooks_url":"https://api.github.com/repos/OpenSCAP/openscap/hooks","issue_events_url":"https://api.github.com/repos/OpenSCAP/openscap/issues/events{/number}","events_url":"https://api.github.com/repos/OpenSCAP/openscap/events","assignees_url":"https://api.github.com/repos/OpenSCAP/openscap/assignees{/user}","branches_url":"https://api.github.com/repos/OpenSCAP/openscap/branches{/branch}","tags_url":"https://api.github.com/repos/OpenSCAP/openscap/tags","blobs_url":"https://api.github.com/repos/OpenSCAP/openscap/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/OpenSCAP/openscap/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/OpenSCAP/openscap/git/refs{/sha}","trees_url":"https://api.github.com/repos/OpenSCAP/openscap/git/trees{/sha}","statuses_url":"https://api.github.com/repos/OpenSCAP/openscap/statuses/{sha}","languages_url":"https://api.github.com/repos/OpenSCAP/openscap/languages","stargazers_url":"https://api.github.com/repos/OpenSCAP/openscap/stargazers","contributors_url":"https://api.github.com/repos/OpenSCAP/openscap/contributors","subscribers_url":"https://api.github.com/repos/OpenSCAP/openscap/subscribers","subscription_url":"https://api.github.com/repos/OpenSCAP/openscap/subscription","commits_url":"https://api.github.com/repos/OpenSCAP/openscap/commits{/sha}","git_commits_url":"https://api.github.com/repos/OpenSCAP/openscap/git/commits{/sha}","comments_url":"https://api.github.com/repos/OpenSCAP/openscap/comments{/number}","issue_comment_url":"https://api.github.com/repos/OpenSCAP/openscap/issues/comments{/number}","contents_url":"https://api.github.com/repos/OpenSCAP/openscap/contents/{+path}","compare_url":"https://api.github.com/repos/OpenSCAP/openscap/compare/{base}...{head}","merges_url":"https://api.github.com/repos/OpenSCAP/openscap/merges","archive_url":"https://api.github.com/repos/OpenSCAP/openscap/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/OpenSCAP/openscap/downloads","issues_url":"https://api.github.com/repos/OpenSCAP/openscap/issues{/number}","pulls_url":"https://api.github.com/repos/OpenSCAP/openscap/pulls{/number}","milestones_url":"https://api.github.com/repos/OpenSCAP/openscap/milestones{/number}","notifications_url":"https://api.github.com/repos/OpenSCAP/openscap/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/OpenSCAP/openscap/labels{/name}","releases_url":"https://api.github.com/repos/OpenSCAP/openscap/releases{/id}","deployments_url":"https://api.github.com/repos/OpenSCAP/openscap/deployments","created_at":1398781414,"updated_at":"2026-10-22T05:08:45Z","pushed_at":1792663135,"git_url":"git://github.com/OpenSCAP/openscap.git","ssh_url":"git@github.com:OpenSCAP/openscap.git","clone_url":"https://github.com/OpenSCAP/openscap.git","svn_url":"https://github.com/OpenSCAP/openscap","homepage":"https://www.open-scap.org/tools/openscap-base","size":32023,"stargazers_count":1837,"watchers_count":1837,"language":"XSLT","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"has_discussions":true,"forks_count":454,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":62,"license":{"key":"lgpl-2.1","name":"GNU Lesser General Public License v2.1","spdx_id":"LGPL-2.1","url":"https://api.github.com/licenses/lgpl-2.1","node_id":"MDc6TGljZW5zZTEx"},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["compliance","cpe","data-stream","openscap","oval","scanning","scap","xccdf"],"visibility":"public","forks":454,"open_issues":62,"watchers":1837,"default_branch":"main","stargazers":1837,"master_branch":"main","organization":"OpenSCAP","custom_properties":{}},"pusher":{"name":"matusmarhefka","email":"mmarhefk@redhat.com"},"forced":false,"organization":{"login":"OpenSCAP","id":7439934,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc0Mzk5MzQ=","url":"https://api.github.com/orgs/OpenSCAP","repos_url":"https://api.github.com/orgs/OpenSCAP/repos","events_url":"https://api.github.com/orgs/OpenSCAP/events","hooks_url":"https://api.github.com/orgs/OpenSCAP/hooks","issues_url":"https://api.github.com/orgs/OpenSCAP/issues","members_url":"https://api.github.com/orgs/OpenSCAP/members{/member}","public_members_url":"https://api.github.com/orgs/OpenSCAP/public_members{/member}","avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=4","description":"Open Source Security Compliance Solution"},"sender":{"login":"matusmarhefka","id":3180425,"node_id":"MDQ6VXNlcjMxODA0MjU=","avatar_url":"https://avatars.githubusercontent.com/u/3180425?v=4","gravatar_id":"","url":"https://api.github.com/users/matusmarhefka","html_url":"https://github.com/matusmarhefka","followers_url":"https://api.github.com/users/matusmarhefka/followers","following_url":"https://api.github.com/users/matusmarhefka/following{/other_user}","gists_url":"https://api.github.com/users/matusmarhefka/gists{/gist_id}","starred_url":"https://api.github.com/users/matusmarhefka/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/matusmarhefka/subscriptions","organizations_url":"https://api.github.com/users/matusmarhefka/orgs","repos_url":"https://api.github.com/users/matusmarhefka/repos","events_url":"https://api.github.com/users/matusmarhefka/events{/privacy}","received_events_url":"https://api.github.com/users/matusmarhefka/received_events","type":"User","user_view_type":"public","site_admin":false},"created":false,"deleted":false,"base_ref":null,"compare":"https://github.com/OpenSCAP/openscap/compare/8042af41ca2e...416c13457b23","commits":[{"id":"866aeaaacc6b74953a2db1f3962c7f80bd8958cb","tree_id":"30bf6dddb1eae32f3eec8575e32557600dedc4e3","distinct":false,"message":"Evaluate OVAL state with no entities as true\n\nAccording to the OVAL specification, child entities in state elements\nhave minOccurs=0. A state without any entities imposes no conditions;\ntherefore, any collected system item vacuously satisfies it.\n\nPreviously, eval_item() in oval_resultTest.c would iterate over an empty\nlist of state contents, leaving the results structure empty. It then\npassed this empty set to ores_get_result_byopr(), which mapped it to\nOVAL_RESULT_UNKNOWN.\n\nThis caused a critical false negative with Canonical's Ubuntu OVAL feeds,\nwhich define singleton family_states with no child entities. Because the\ninventory check evaluated to unknown, every Ubuntu Security Notice (USN)\nextending that inventory definition failed to evaluate to true, reporting\nzero vulnerabilities and exiting cleanly with code 0.\n\nThis patch detects when an OVAL state contains no entities and immediately\nreturns OVAL_RESULT_TRUE. Also adds a regression test suite covering\nentity-less states and Ubuntu applicability check patterns.\n\nFixes #2396","timestamp":"2026-10-22T09:42:22+02:00","url":"https://github.com/OpenSCAP/openscap/commit/866aeaaacc6b74953a2db1f3962c7f80bd8958cb","author":{"name":"Mohit","email":"mohitnehete6@gmail.com","date":"2026-10-20T19:43:13+05:30","username":"Mohit20057"},"committer":{"name":"Jan Černý","email":"jcerny@redhat.com","date":"2026-10-22T09:42:22+02:00","username":"jan-cerny"},"added":["tests/API/OVAL/unittests/empty_state.xml","tests/API/OVAL/unittests/test_empty_state.sh"],"removed":[],"modified":["src/OVAL/results/oval_resultTest.c","tests/API/OVAL/unittests/CMakeLists.txt"]},{"id":"416c13457b23ca81a693879cef4d535d29222b2b","tree_id":"14e7c3e438f2f3a160930ec844f768925fec5de1","distinct":true,"message":"Merge pull request #2463 from jan-cerny/backport_2452\n\n[backport] Evaluate OVAL state with no entities as true","timestamp":"2026-10-22T11:58:55+02:00","url":"https://github.com/OpenSCAP/openscap/commit/416c13457b23ca81a693879cef4d535d29222b2b","author":{"name":"Matus Marhefka","email":"mmarhefk@redhat.com","date":"2026-10-22T11:58:55+02:00","username":"matusmarhefka"},"committer":{"name":"GitHub","email":"noreply@github.com","date":"2026-10-22T11:58:55+02:00","username":"web-flow"},"added":["tests/API/OVAL/unittests/empty_state.xml","tests/API/OVAL/unittests/test_empty_state.sh"],"removed":[],"modified":["src/OVAL/results/oval_resultTest.c","tests/API/OVAL/unittests/CMakeLists.txt"]}],"head_commit":{"id":"416c13457b23ca81a693879cef4d535d29222b2b","tree_id":"14e7c3e438f2f3a160930ec844f768925fec5de1","distinct":true,"message":"Merge pull request #2463 from jan-cerny/backport_2452\n\n[backport] Evaluate OVAL state with no entities as true","timestamp":"2026-10-22T11:58:55+02:00","url":"https://github.com/OpenSCAP/openscap/commit/416c13457b23ca81a693879cef4d535d29222b2b","author":{"name":"Matus Marhefka","email":"mmarhefk@redhat.com","date":"2026-10-22T11:58:55+02:00","username":"matusmarhefka"},"committer":{"name":"GitHub","email":"noreply@github.com","date":"2026-10-22T11:58:55+02:00","username":"web-flow"},"added":["tests/API/OVAL/unittests/empty_state.xml","tests/API/OVAL/unittests/test_empty_state.sh"],"removed":[],"modified":["src/OVAL/results/oval_resultTest.c","tests/API/OVAL/unittests/CMakeLists.txt"]}}