[OVAL REPOSITORY] "identity constraint key for element 'oval_definitions' not found" error validating XML schema

William Munyan William.Munyan at cisecurity.org
Fri Aug 19 20:17:09 EDT 2016


Max,
This issue has been fixed and the repo updated with the correct IDs.

Yes David we do perform QA, but there is a bug when generating IDs for <object_reference> elements in <set>'s.  It's been difficult to apprehend so we're still working on it.

Cheers,
-Bill M.

-----Original Message-----
From: David Solin [mailto:solin at jovalcm.com]
Sent: Thursday, August 18, 2016 8:34 PM
To: Max Sprauer; William Munyan
Cc: oval_repository at lists.cisecurity.org
Subject: Re: [OVAL REPOSITORY] "identity constraint key for element 'oval_definitions' not found" error validating XML schema

Here is a more descriptive validation error:
SAX Error, line 36161, column 20: Key 'object_referenceKeyRef' with value 'oval:org.cisecurity:obj:3960' not found for identity constraint of element 'oval_definitions'.

I thought CIS had introduced a QA process for insuring that missing references were no longer accepted in merges.  What gives?

Best regards,
—David Solin



> On Aug 18, 2016, at 3:53 PM, Max Sprauer <Max.Sprauer at software.dell.com> wrote:
>
> Hello all,
>
> I use the individual 5.10 Windows vulnerability definition files (https://oval.cisecurity.org/repository/download/5.10/vulnerability) with the reference OVAL Interpreter version 5.10.1.
>
> Lately, almost every Windows vulnerability definition file fails schema validation (see example of output below).  Do I need to get an updated schema file, or is it a problem with the XML itself?
>
> Thank you,
>  Max Sprauer
>
>
>> ovaldi -m -c -o microsoft_windows_10.xml
>
> ----------------------------------------------------
> OVAL Definition Interpreter
> Version: 5.10.1 Build: 7
> Build date: Apr  6 2015 14:48:26
> Copyright (c) 2002-2014 - The MITRE Corporation
> ----------------------------------------------------
>
> Start Time: Thu Aug 18 16:35:09 2016
>
> ** parsing microsoft_windows_10.xml file.
>    - validating xml schema.
> Error while parsing xml file:
>        Severity: Error
>        Message: identity constraint key for element 'oval_definitions' not found
>        File: C:\ProgramData\Dell\KACE\kbots_cache\packages\kbots\9\oval64/microsoft_windows_10.xml
>        Line 36161
>        At char 20
>
>
>
> ...
>
> _______________________________________________
> OVAL_Repository mailing list
> OVAL_Repository at lists.cisecurity.org
> http://lists.cisecurity.org/mailman/listinfo/oval_repository_lists.cisecurity.org

...
This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.

. . .

...


More information about the OVAL_Repository mailing list