vuln-list-alt/oval/c9f2/ALT-PU-2016-1855/definitions.json

105 lines
3.6 KiB
JSON
Raw Normal View History

2024-06-28 16:17:52 +03:00
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20161855",
"Version": "oval:org.altlinux.errata:def:20161855",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2016-1855: package `gnupg` update to version 1.4.21-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2016-1855",
"RefURL": "https://errata.altlinux.org/ALT-PU-2016-1855",
"Source": "ALTPU"
},
{
"RefID": "BDU:2019-01635",
"RefURL": "https://bdu.fstec.ru/vul/2019-01635",
"Source": "BDU"
},
{
"RefID": "CVE-2016-6313",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-6313",
"Source": "CVE"
}
],
"Description": "This update upgrades gnupg to version 1.4.21-alt1. \nSecurity Fix(es):\n\n * BDU:2019-01635: Уязвимость генератора псевдослучайных чисел библиотеки криптографии Libgcrypt, связанная с раскрытием информации, позволяющая нарушителю прогнозировать выходные данные\n\n * CVE-2016-6313: The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2016-08-17"
},
"Updated": {
"Date": "2016-08-17"
},
"BDUs": [
{
"ID": "BDU:2019-01635",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-200",
"Href": "https://bdu.fstec.ru/vul/2019-01635",
"Impact": "Low",
"Public": "20160817"
}
],
"CVEs": [
{
"ID": "CVE-2016-6313",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-200",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-6313",
"Impact": "Low",
"Public": "20161213"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20161855001",
"Comment": "gnupg is earlier than 0:1.4.21-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20161855002",
"Comment": "gnupg-ldap is earlier than 0:1.4.21-alt1"
}
]
}
]
}
}
]
}