ALT Vulnerability

This commit is contained in:
Иван Пепеляев 2024-01-30 21:03:08 +00:00
parent fffda591eb
commit 1265dd8e77
28 changed files with 2722 additions and 0 deletions

File diff suppressed because one or more lines are too long

View File

@ -0,0 +1,100 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20241228001",
"Version": "1",
"comment": "mediawiki is installed",
"Name": "mediawiki"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228002",
"Version": "1",
"comment": "mediawiki-apache2 is installed",
"Name": "mediawiki-apache2"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228003",
"Version": "1",
"comment": "mediawiki-common is installed",
"Name": "mediawiki-common"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228004",
"Version": "1",
"comment": "mediawiki-extensions-PdfHandler is installed",
"Name": "mediawiki-extensions-PdfHandler"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228005",
"Version": "1",
"comment": "mediawiki-extensions-Scribunto is installed",
"Name": "mediawiki-extensions-Scribunto"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228006",
"Version": "1",
"comment": "mediawiki-extensions-SyntaxHighlight_GeSHi is installed",
"Name": "mediawiki-extensions-SyntaxHighlight_GeSHi"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228007",
"Version": "1",
"comment": "mediawiki-mysql is installed",
"Name": "mediawiki-mysql"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228008",
"Version": "1",
"comment": "mediawiki-php7 is installed",
"Name": "mediawiki-php7"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228009",
"Version": "1",
"comment": "mediawiki-php8.0 is installed",
"Name": "mediawiki-php8.0"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228010",
"Version": "1",
"comment": "mediawiki-php8.1 is installed",
"Name": "mediawiki-php8.1"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228011",
"Version": "1",
"comment": "mediawiki-php8.2 is installed",
"Name": "mediawiki-php8.2"
},
{
"ID": "oval:org.altlinux.errata:obj:20241228012",
"Version": "1",
"comment": "mediawiki-postgresql is installed",
"Name": "mediawiki-postgresql"
}
]
}

View File

@ -0,0 +1,35 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20241228001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.40.1-alt2",
"Arch": {},
"Evr": {
"Text": "0:1.40.1-alt2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
},
{
"ID": "oval:org.altlinux.errata:ste:20241228002",
"Version": "1",
"Comment": "package EVR is earlier than 1:1.40.1-alt2",
"Arch": {},
"Evr": {
"Text": "1:1.40.1-alt2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

View File

@ -0,0 +1,162 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20241228001",
"Version": "1",
"Check": "all",
"Comment": "mediawiki is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228002",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-apache2 is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228003",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-common is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228004",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-extensions-PdfHandler is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228005",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-extensions-Scribunto is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228006",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-extensions-SyntaxHighlight_GeSHi is earlier than 1:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228002"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228007",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-mysql is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228008",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-php7 is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228009",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-php8.0 is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228010",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-php8.1 is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228011",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-php8.2 is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228011"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241228012",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-postgresql is earlier than 0:1.40.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241228012"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
}
}
]
}

View File

@ -0,0 +1,166 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20241229",
"Version": "oval:org.altlinux.errata:def:20241229",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-1229: package `moodle` update to version 4.3.0-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-1229",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1229",
"Source": "ALTPU"
},
{
"RefID": "CVE-2022-39369",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-39369",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40316",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40316",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40317",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40317",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40318",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40318",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40319",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40319",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40320",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40320",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40322",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40322",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40323",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40323",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40324",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40324",
"Source": "CVE"
},
{
"RefID": "CVE-2023-40325",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40325",
"Source": "CVE"
}
],
"Description": "This update upgrades moodle to version 4.3.0-alt1. \nSecurity Fix(es):\n\n * CVE-2022-39369: phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacker to control the host header and use a valid ticket granted for any authorized service in the same SSO realm (CAS server) to authenticate to the service protected by phpCAS. Depending on the settings of the CAS server service registry in worst case this may be any other service URL (if the allowed URLs are configured to \"^(https)://.*\") or may be strictly limited to known and authorized services in the same SSO federation if proper URL service validation is applied. This vulnerability may allow an attacker to gain access to a victim's account on a vulnerable CASified service without victim's knowledge, when the victim visits attacker's website while being logged in to the same CAS server. phpCAS 1.6.0 is a major version upgrade that starts enforcing service URL discovery validation, because there is unfortunately no 100% safe default config to use in PHP. Starting this version, it is required to pass in an additional service base URL argument when constructing the client class. For more information, please refer to the upgrading doc. This vulnerability only impacts the CAS client that the phpCAS library protects against. The problematic service URL discovery behavior in phpCAS \u003c 1.6.0 will only be disabled, and thus you are not impacted from it, if the phpCAS configuration has the following setup: 1. `phpCAS::setUrl()` is called (a reminder that you have to pass in the full URL of the current page, rather than your service base URL), and 2. `phpCAS::setCallbackURL()` is called, only when the proxy mode is enabled. 3. If your PHP's HTTP header input `X-Forwarded-Host`, `X-Forwarded-Server`, `Host`, `X-Forwarded-Proto`, `X-Forwarded-Protocol` is sanitized before reaching PHP (by a reverse proxy, for example), you will not be impacted by this vulnerability either. If your CAS server service registry is configured to only allow known and trusted service URLs the severity of the vulnerability is reduced substantially in its severity since an attacker must be in control of another authorized service. Otherwise, you should upgrade the library to get the safe service discovery behavior.\n\n * CVE-2023-40316: description unavailable\n\n * CVE-2023-40317: description unavailable\n\n * CVE-2023-40318: description unavailable\n\n * CVE-2023-40319: description unavailable\n\n * CVE-2023-40320: description unavailable\n\n * CVE-2023-40322: description unavailable\n\n * CVE-2023-40323: description unavailable\n\n * CVE-2023-40324: description unavailable\n\n * CVE-2023-40325: description unavailable",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2023 BaseALT Ltd.",
"Issued": {
"Date": "2024-01-30"
},
"Updated": {
"Date": "2024-01-30"
},
"bdu": null,
"Cves": [
{
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"Cwe": "CWE-99",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-39369",
"Impact": "High",
"Public": "20221101",
"CveID": "CVE-2022-39369"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20241229001",
"Comment": "moodle is earlier than 0:4.3.0-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241229002",
"Comment": "moodle-apache2 is earlier than 0:4.3.0-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241229003",
"Comment": "moodle-base is earlier than 0:4.3.0-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241229004",
"Comment": "moodle-local-mysql is earlier than 0:4.3.0-alt1"
}
]
}
]
}
}
]
}

View File

@ -0,0 +1,52 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20241229001",
"Version": "1",
"comment": "moodle is installed",
"Name": "moodle"
},
{
"ID": "oval:org.altlinux.errata:obj:20241229002",
"Version": "1",
"comment": "moodle-apache2 is installed",
"Name": "moodle-apache2"
},
{
"ID": "oval:org.altlinux.errata:obj:20241229003",
"Version": "1",
"comment": "moodle-base is installed",
"Name": "moodle-base"
},
{
"ID": "oval:org.altlinux.errata:obj:20241229004",
"Version": "1",
"comment": "moodle-local-mysql is installed",
"Name": "moodle-local-mysql"
}
]
}

View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20241229001",
"Version": "1",
"Comment": "package EVR is earlier than 0:4.3.0-alt1",
"Arch": {},
"Evr": {
"Text": "0:4.3.0-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

View File

@ -0,0 +1,66 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20241229001",
"Version": "1",
"Check": "all",
"Comment": "moodle is earlier than 0:4.3.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241229001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241229002",
"Version": "1",
"Check": "all",
"Comment": "moodle-apache2 is earlier than 0:4.3.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241229002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241229003",
"Version": "1",
"Check": "all",
"Comment": "moodle-base is earlier than 0:4.3.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241229003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241229004",
"Version": "1",
"Check": "all",
"Comment": "moodle-local-mysql is earlier than 0:4.3.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241229004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
}
}
]
}

File diff suppressed because one or more lines are too long

View File

@ -0,0 +1,46 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20241230001",
"Version": "1",
"comment": "nextcloud is installed",
"Name": "nextcloud"
},
{
"ID": "oval:org.altlinux.errata:obj:20241230002",
"Version": "1",
"comment": "nextcloud-apache2 is installed",
"Name": "nextcloud-apache2"
},
{
"ID": "oval:org.altlinux.errata:obj:20241230003",
"Version": "1",
"comment": "nextcloud-nginx is installed",
"Name": "nextcloud-nginx"
}
]
}

View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20241230001",
"Version": "1",
"Comment": "package EVR is earlier than 0:27.1.4-alt1",
"Arch": {},
"Evr": {
"Text": "0:27.1.4-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

View File

@ -0,0 +1,54 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20241230001",
"Version": "1",
"Check": "all",
"Comment": "nextcloud is earlier than 0:27.1.4-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241230001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241230001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241230002",
"Version": "1",
"Check": "all",
"Comment": "nextcloud-apache2 is earlier than 0:27.1.4-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241230002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241230001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241230003",
"Version": "1",
"Check": "all",
"Comment": "nextcloud-nginx is earlier than 0:27.1.4-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241230003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241230001"
}
}
]
}

View File

@ -0,0 +1,101 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20241257",
"Version": "oval:org.altlinux.errata:def:20241257",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-1257: package `mediawiki-extensions-Math` update to version 3.0.0.1.40-alt1.4cf19b0",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-1257",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1257",
"Source": "ALTPU"
}
],
"Description": "This update upgrades mediawiki-extensions-Math to version 3.0.0.1.40-alt1.4cf19b0. \nSecurity Fix(es):\n\n * #46923: Собрать с php8",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2023 BaseALT Ltd.",
"Issued": {
"Date": "2024-01-30"
},
"Updated": {
"Date": "2024-01-30"
},
"bdu": null,
"Bugzilla": [
{
"Id": "46923",
"Href": "https://bugzilla.altlinux.org/46923",
"Data": "Собрать с php8"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20241257001",
"Comment": "mediawiki-extensions-Math is earlier than 0:3.0.0.1.40-alt1.4cf19b0"
}
]
}
]
}
}
]
}

View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20241257001",
"Version": "1",
"comment": "mediawiki-extensions-Math is installed",
"Name": "mediawiki-extensions-Math"
}
]
}

View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20241257001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.0.0.1.40-alt1.4cf19b0",
"Arch": {},
"Evr": {
"Text": "0:3.0.0.1.40-alt1.4cf19b0",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20241257001",
"Version": "1",
"Check": "all",
"Comment": "mediawiki-extensions-Math is earlier than 0:3.0.0.1.40-alt1.4cf19b0",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241257001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241257001"
}
}
]
}

View File

@ -0,0 +1,117 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20241332",
"Version": "oval:org.altlinux.errata:def:20241332",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-1332: package `choqok` update to version 1.7.0-alt4",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-1332",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1332",
"Source": "ALTPU"
}
],
"Description": "This update upgrades choqok to version 1.7.0-alt4. \nSecurity Fix(es):\n\n * #48773: Сбой программы Choqok после удаления учетной записи",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2023 BaseALT Ltd.",
"Issued": {
"Date": "2024-01-30"
},
"Updated": {
"Date": "2024-01-30"
},
"bdu": null,
"Bugzilla": [
{
"Id": "48773",
"Href": "https://bugzilla.altlinux.org/48773",
"Data": "Сбой программы Choqok после удаления учетной записи"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20241332001",
"Comment": "choqok is earlier than 0:1.7.0-alt4"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241332002",
"Comment": "choqok-devel is earlier than 0:1.7.0-alt4"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241332003",
"Comment": "libchoqok1 is earlier than 0:1.7.0-alt4"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241332004",
"Comment": "libgnusocialapihelper1 is earlier than 0:1.7.0-alt4"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241332005",
"Comment": "libtwitterapihelper1 is earlier than 0:1.7.0-alt4"
}
]
}
]
}
}
]
}

View File

@ -0,0 +1,58 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20241332001",
"Version": "1",
"comment": "choqok is installed",
"Name": "choqok"
},
{
"ID": "oval:org.altlinux.errata:obj:20241332002",
"Version": "1",
"comment": "choqok-devel is installed",
"Name": "choqok-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20241332003",
"Version": "1",
"comment": "libchoqok1 is installed",
"Name": "libchoqok1"
},
{
"ID": "oval:org.altlinux.errata:obj:20241332004",
"Version": "1",
"comment": "libgnusocialapihelper1 is installed",
"Name": "libgnusocialapihelper1"
},
{
"ID": "oval:org.altlinux.errata:obj:20241332005",
"Version": "1",
"comment": "libtwitterapihelper1 is installed",
"Name": "libtwitterapihelper1"
}
]
}

View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20241332001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.7.0-alt4",
"Arch": {},
"Evr": {
"Text": "0:1.7.0-alt4",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

View File

@ -0,0 +1,78 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20241332001",
"Version": "1",
"Check": "all",
"Comment": "choqok is earlier than 0:1.7.0-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241332001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241332002",
"Version": "1",
"Check": "all",
"Comment": "choqok-devel is earlier than 0:1.7.0-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241332002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241332003",
"Version": "1",
"Check": "all",
"Comment": "libchoqok1 is earlier than 0:1.7.0-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241332003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241332004",
"Version": "1",
"Check": "all",
"Comment": "libgnusocialapihelper1 is earlier than 0:1.7.0-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241332004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241332005",
"Version": "1",
"Check": "all",
"Comment": "libtwitterapihelper1 is earlier than 0:1.7.0-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241332005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
}
}
]
}

View File

@ -0,0 +1,101 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20241357",
"Version": "oval:org.altlinux.errata:def:20241357",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-1357: package `php8.2-swoole` update to version 5.1.1-alt2.15",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-1357",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1357",
"Source": "ALTPU"
}
],
"Description": "This update upgrades php8.2-swoole to version 5.1.1-alt2.15. \nSecurity Fix(es):\n\n * #49116: Ошибка сегментирования в php8.3, при наличии php8.3-swoole и php8.3-mysqlnd",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2023 BaseALT Ltd.",
"Issued": {
"Date": "2024-01-30"
},
"Updated": {
"Date": "2024-01-30"
},
"bdu": null,
"Bugzilla": [
{
"Id": "49116",
"Href": "https://bugzilla.altlinux.org/49116",
"Data": "Ошибка сегментирования в php8.3, при наличии php8.3-swoole и php8.3-mysqlnd"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20241357001",
"Comment": "php8.2-swoole is earlier than 0:5.1.1-alt2.15"
}
]
}
]
}
}
]
}

View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20241357001",
"Version": "1",
"comment": "php8.2-swoole is installed",
"Name": "php8.2-swoole"
}
]
}

View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20241357001",
"Version": "1",
"Comment": "package EVR is earlier than 0:5.1.1-alt2.15",
"Arch": {},
"Evr": {
"Text": "0:5.1.1-alt2.15",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20241357001",
"Version": "1",
"Check": "all",
"Comment": "php8.2-swoole is earlier than 0:5.1.1-alt2.15",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241357001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241357001"
}
}
]
}

View File

@ -0,0 +1,117 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20241386",
"Version": "oval:org.altlinux.errata:def:20241386",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-1386: package `jobe` update to version 1.9.0-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-1386",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1386",
"Source": "ALTPU"
},
{
"RefID": "CVE-2020-36642",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2020-36642",
"Source": "CVE"
}
],
"Description": "This update upgrades jobe to version 1.9.0-alt1. \nSecurity Fix(es):\n\n * CVE-2020-36642: A vulnerability was found in trampgeek jobe up to 1.6.x and classified as critical. This issue affects the function run_in_sandbox of the file application/libraries/LanguageTask.php. The manipulation leads to command injection. Upgrading to version 1.7.0 is able to address this issue. The identifier of the patch is 8f43daf50c943b98eaf0c542da901a4a16e85b02. It is recommended to upgrade the affected component. The identifier VDB-217553 was assigned to this vulnerability.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Critical",
"Rights": "Copyright 2023 BaseALT Ltd.",
"Issued": {
"Date": "2024-01-30"
},
"Updated": {
"Date": "2024-01-30"
},
"bdu": null,
"Cves": [
{
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-77",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2020-36642",
"Impact": "Critical",
"Public": "20230106",
"CveID": "CVE-2020-36642"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20241386001",
"Comment": "jobe is earlier than 0:1.9.0-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241386002",
"Comment": "jobe-apache2 is earlier than 0:1.9.0-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20241386003",
"Comment": "jobe-mysql is earlier than 0:1.9.0-alt1"
}
]
}
]
}
}
]
}

View File

@ -0,0 +1,46 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20241386001",
"Version": "1",
"comment": "jobe is installed",
"Name": "jobe"
},
{
"ID": "oval:org.altlinux.errata:obj:20241386002",
"Version": "1",
"comment": "jobe-apache2 is installed",
"Name": "jobe-apache2"
},
{
"ID": "oval:org.altlinux.errata:obj:20241386003",
"Version": "1",
"comment": "jobe-mysql is installed",
"Name": "jobe-mysql"
}
]
}

View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20241386001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.9.0-alt1",
"Arch": {},
"Evr": {
"Text": "0:1.9.0-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

View File

@ -0,0 +1,54 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20241386001",
"Version": "1",
"Check": "all",
"Comment": "jobe is earlier than 0:1.9.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241386001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241386001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241386002",
"Version": "1",
"Check": "all",
"Comment": "jobe-apache2 is earlier than 0:1.9.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241386002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241386001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20241386003",
"Version": "1",
"Check": "all",
"Comment": "jobe-mysql is earlier than 0:1.9.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20241386003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20241386001"
}
}
]
}