The openscap project is a set of open source libraries that support the SCAP (Security Content Automation Protocol) set of standards from NIST. It supports CPE, CCE, CVE, and CVSS.
Changes: The OVAL interpreter now fully supports RHEL OVAL content and produces system characteristics. There are many bugfixes throughout the code base.