ALT Vulnerability
This commit is contained in:
parent
fffda591eb
commit
1265dd8e77
852
oval/p10/ALT-PU-2024-1228/definitions.json
Normal file
852
oval/p10/ALT-PU-2024-1228/definitions.json
Normal file
File diff suppressed because one or more lines are too long
100
oval/p10/ALT-PU-2024-1228/objects.json
Normal file
100
oval/p10/ALT-PU-2024-1228/objects.json
Normal file
@ -0,0 +1,100 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"dataType": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RpmInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228001",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki is installed",
|
||||
"Name": "mediawiki"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228002",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-apache2 is installed",
|
||||
"Name": "mediawiki-apache2"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228003",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-common is installed",
|
||||
"Name": "mediawiki-common"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228004",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-extensions-PdfHandler is installed",
|
||||
"Name": "mediawiki-extensions-PdfHandler"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228005",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-extensions-Scribunto is installed",
|
||||
"Name": "mediawiki-extensions-Scribunto"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228006",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-extensions-SyntaxHighlight_GeSHi is installed",
|
||||
"Name": "mediawiki-extensions-SyntaxHighlight_GeSHi"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228007",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-mysql is installed",
|
||||
"Name": "mediawiki-mysql"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228008",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-php7 is installed",
|
||||
"Name": "mediawiki-php7"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228009",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-php8.0 is installed",
|
||||
"Name": "mediawiki-php8.0"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228010",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-php8.1 is installed",
|
||||
"Name": "mediawiki-php8.1"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228011",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-php8.2 is installed",
|
||||
"Name": "mediawiki-php8.2"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241228012",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-postgresql is installed",
|
||||
"Name": "mediawiki-postgresql"
|
||||
}
|
||||
]
|
||||
}
|
35
oval/p10/ALT-PU-2024-1228/states.json
Normal file
35
oval/p10/ALT-PU-2024-1228/states.json
Normal file
@ -0,0 +1,35 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RpmInfoState": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241228001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:1.40.1-alt2",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "0:1.40.1-alt2",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241228002",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 1:1.40.1-alt2",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "1:1.40.1-alt2",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
162
oval/p10/ALT-PU-2024-1228/tests.json
Normal file
162
oval/p10/ALT-PU-2024-1228/tests.json
Normal file
@ -0,0 +1,162 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-apache2 is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228003",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-common is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228003"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228004",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-extensions-PdfHandler is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228004"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228005",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-extensions-Scribunto is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228005"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228006",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-extensions-SyntaxHighlight_GeSHi is earlier than 1:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228006"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228002"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228007",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-mysql is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228007"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228008",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-php7 is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228008"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228009",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-php8.0 is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228009"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228010",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-php8.1 is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228010"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228011",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-php8.2 is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228011"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241228012",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-postgresql is earlier than 0:1.40.1-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241228012"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241228001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
166
oval/p10/ALT-PU-2024-1229/definitions.json
Normal file
166
oval/p10/ALT-PU-2024-1229/definitions.json
Normal file
@ -0,0 +1,166 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:20241229",
|
||||
"Version": "oval:org.altlinux.errata:def:20241229",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-1229: package `moodle` update to version 4.3.0-alt1",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch p10"
|
||||
],
|
||||
"Products": [
|
||||
"ALT Server",
|
||||
"ALT Virtualization Server",
|
||||
"ALT Workstation",
|
||||
"ALT Workstation K",
|
||||
"ALT Education",
|
||||
"Simply Linux",
|
||||
"Starterkit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-1229",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1229",
|
||||
"Source": "ALTPU"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2022-39369",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-39369",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40316",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40316",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40317",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40317",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40318",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40318",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40319",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40319",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40320",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40320",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40322",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40322",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40323",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40323",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40324",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40324",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2023-40325",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-40325",
|
||||
"Source": "CVE"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades moodle to version 4.3.0-alt1. \nSecurity Fix(es):\n\n * CVE-2022-39369: phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacker to control the host header and use a valid ticket granted for any authorized service in the same SSO realm (CAS server) to authenticate to the service protected by phpCAS. Depending on the settings of the CAS server service registry in worst case this may be any other service URL (if the allowed URLs are configured to \"^(https)://.*\") or may be strictly limited to known and authorized services in the same SSO federation if proper URL service validation is applied. This vulnerability may allow an attacker to gain access to a victim's account on a vulnerable CASified service without victim's knowledge, when the victim visits attacker's website while being logged in to the same CAS server. phpCAS 1.6.0 is a major version upgrade that starts enforcing service URL discovery validation, because there is unfortunately no 100% safe default config to use in PHP. Starting this version, it is required to pass in an additional service base URL argument when constructing the client class. For more information, please refer to the upgrading doc. This vulnerability only impacts the CAS client that the phpCAS library protects against. The problematic service URL discovery behavior in phpCAS \u003c 1.6.0 will only be disabled, and thus you are not impacted from it, if the phpCAS configuration has the following setup: 1. `phpCAS::setUrl()` is called (a reminder that you have to pass in the full URL of the current page, rather than your service base URL), and 2. `phpCAS::setCallbackURL()` is called, only when the proxy mode is enabled. 3. If your PHP's HTTP header input `X-Forwarded-Host`, `X-Forwarded-Server`, `Host`, `X-Forwarded-Proto`, `X-Forwarded-Protocol` is sanitized before reaching PHP (by a reverse proxy, for example), you will not be impacted by this vulnerability either. If your CAS server service registry is configured to only allow known and trusted service URLs the severity of the vulnerability is reduced substantially in its severity since an attacker must be in control of another authorized service. Otherwise, you should upgrade the library to get the safe service discovery behavior.\n\n * CVE-2023-40316: description unavailable\n\n * CVE-2023-40317: description unavailable\n\n * CVE-2023-40318: description unavailable\n\n * CVE-2023-40319: description unavailable\n\n * CVE-2023-40320: description unavailable\n\n * CVE-2023-40322: description unavailable\n\n * CVE-2023-40323: description unavailable\n\n * CVE-2023-40324: description unavailable\n\n * CVE-2023-40325: description unavailable",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "High",
|
||||
"Rights": "Copyright 2023 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"bdu": null,
|
||||
"Cves": [
|
||||
{
|
||||
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
|
||||
"Cwe": "CWE-99",
|
||||
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-39369",
|
||||
"Impact": "High",
|
||||
"Public": "20221101",
|
||||
"CveID": "CVE-2022-39369"
|
||||
}
|
||||
],
|
||||
"AffectedCpeList": {
|
||||
"Cpe": [
|
||||
"cpe:/o:alt:kworkstation:10",
|
||||
"cpe:/o:alt:workstation:10",
|
||||
"cpe:/o:alt:server:10",
|
||||
"cpe:/o:alt:server-v:10",
|
||||
"cpe:/o:alt:education:10",
|
||||
"cpe:/o:alt:slinux:10",
|
||||
"cpe:/o:alt:starterkit:p10",
|
||||
"cpe:/o:alt:kworkstation:10.1",
|
||||
"cpe:/o:alt:workstation:10.1",
|
||||
"cpe:/o:alt:server:10.1",
|
||||
"cpe:/o:alt:server-v:10.1",
|
||||
"cpe:/o:alt:education:10.1",
|
||||
"cpe:/o:alt:slinux:10.1",
|
||||
"cpe:/o:alt:starterkit:10.1",
|
||||
"cpe:/o:alt:kworkstation:10.2",
|
||||
"cpe:/o:alt:workstation:10.2",
|
||||
"cpe:/o:alt:server:10.2",
|
||||
"cpe:/o:alt:server-v:10.2",
|
||||
"cpe:/o:alt:education:10.2",
|
||||
"cpe:/o:alt:slinux:10.2",
|
||||
"cpe:/o:alt:starterkit:10.2"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:2001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241229001",
|
||||
"Comment": "moodle is earlier than 0:4.3.0-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241229002",
|
||||
"Comment": "moodle-apache2 is earlier than 0:4.3.0-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241229003",
|
||||
"Comment": "moodle-base is earlier than 0:4.3.0-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241229004",
|
||||
"Comment": "moodle-local-mysql is earlier than 0:4.3.0-alt1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
52
oval/p10/ALT-PU-2024-1229/objects.json
Normal file
52
oval/p10/ALT-PU-2024-1229/objects.json
Normal file
@ -0,0 +1,52 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"dataType": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RpmInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241229001",
|
||||
"Version": "1",
|
||||
"comment": "moodle is installed",
|
||||
"Name": "moodle"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241229002",
|
||||
"Version": "1",
|
||||
"comment": "moodle-apache2 is installed",
|
||||
"Name": "moodle-apache2"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241229003",
|
||||
"Version": "1",
|
||||
"comment": "moodle-base is installed",
|
||||
"Name": "moodle-base"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241229004",
|
||||
"Version": "1",
|
||||
"comment": "moodle-local-mysql is installed",
|
||||
"Name": "moodle-local-mysql"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/p10/ALT-PU-2024-1229/states.json
Normal file
23
oval/p10/ALT-PU-2024-1229/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RpmInfoState": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241229001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:4.3.0-alt1",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "0:4.3.0-alt1",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
66
oval/p10/ALT-PU-2024-1229/tests.json
Normal file
66
oval/p10/ALT-PU-2024-1229/tests.json
Normal file
@ -0,0 +1,66 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241229001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "moodle is earlier than 0:4.3.0-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241229001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241229002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "moodle-apache2 is earlier than 0:4.3.0-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241229002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241229003",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "moodle-base is earlier than 0:4.3.0-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241229003"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241229004",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "moodle-local-mysql is earlier than 0:4.3.0-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241229004"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241229001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
251
oval/p10/ALT-PU-2024-1230/definitions.json
Normal file
251
oval/p10/ALT-PU-2024-1230/definitions.json
Normal file
File diff suppressed because one or more lines are too long
46
oval/p10/ALT-PU-2024-1230/objects.json
Normal file
46
oval/p10/ALT-PU-2024-1230/objects.json
Normal file
@ -0,0 +1,46 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"dataType": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RpmInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241230001",
|
||||
"Version": "1",
|
||||
"comment": "nextcloud is installed",
|
||||
"Name": "nextcloud"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241230002",
|
||||
"Version": "1",
|
||||
"comment": "nextcloud-apache2 is installed",
|
||||
"Name": "nextcloud-apache2"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241230003",
|
||||
"Version": "1",
|
||||
"comment": "nextcloud-nginx is installed",
|
||||
"Name": "nextcloud-nginx"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/p10/ALT-PU-2024-1230/states.json
Normal file
23
oval/p10/ALT-PU-2024-1230/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RpmInfoState": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241230001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:27.1.4-alt1",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "0:27.1.4-alt1",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
54
oval/p10/ALT-PU-2024-1230/tests.json
Normal file
54
oval/p10/ALT-PU-2024-1230/tests.json
Normal file
@ -0,0 +1,54 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241230001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "nextcloud is earlier than 0:27.1.4-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241230001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241230001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241230002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "nextcloud-apache2 is earlier than 0:27.1.4-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241230002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241230001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241230003",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "nextcloud-nginx is earlier than 0:27.1.4-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241230003"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241230001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
101
oval/p10/ALT-PU-2024-1257/definitions.json
Normal file
101
oval/p10/ALT-PU-2024-1257/definitions.json
Normal file
@ -0,0 +1,101 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:20241257",
|
||||
"Version": "oval:org.altlinux.errata:def:20241257",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-1257: package `mediawiki-extensions-Math` update to version 3.0.0.1.40-alt1.4cf19b0",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch p10"
|
||||
],
|
||||
"Products": [
|
||||
"ALT Server",
|
||||
"ALT Virtualization Server",
|
||||
"ALT Workstation",
|
||||
"ALT Workstation K",
|
||||
"ALT Education",
|
||||
"Simply Linux",
|
||||
"Starterkit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-1257",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1257",
|
||||
"Source": "ALTPU"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades mediawiki-extensions-Math to version 3.0.0.1.40-alt1.4cf19b0. \nSecurity Fix(es):\n\n * #46923: Собрать с php8",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "Low",
|
||||
"Rights": "Copyright 2023 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"bdu": null,
|
||||
"Bugzilla": [
|
||||
{
|
||||
"Id": "46923",
|
||||
"Href": "https://bugzilla.altlinux.org/46923",
|
||||
"Data": "Собрать с php8"
|
||||
}
|
||||
],
|
||||
"AffectedCpeList": {
|
||||
"Cpe": [
|
||||
"cpe:/o:alt:kworkstation:10",
|
||||
"cpe:/o:alt:workstation:10",
|
||||
"cpe:/o:alt:server:10",
|
||||
"cpe:/o:alt:server-v:10",
|
||||
"cpe:/o:alt:education:10",
|
||||
"cpe:/o:alt:slinux:10",
|
||||
"cpe:/o:alt:starterkit:p10",
|
||||
"cpe:/o:alt:kworkstation:10.1",
|
||||
"cpe:/o:alt:workstation:10.1",
|
||||
"cpe:/o:alt:server:10.1",
|
||||
"cpe:/o:alt:server-v:10.1",
|
||||
"cpe:/o:alt:education:10.1",
|
||||
"cpe:/o:alt:slinux:10.1",
|
||||
"cpe:/o:alt:starterkit:10.1",
|
||||
"cpe:/o:alt:kworkstation:10.2",
|
||||
"cpe:/o:alt:workstation:10.2",
|
||||
"cpe:/o:alt:server:10.2",
|
||||
"cpe:/o:alt:server-v:10.2",
|
||||
"cpe:/o:alt:education:10.2",
|
||||
"cpe:/o:alt:slinux:10.2",
|
||||
"cpe:/o:alt:starterkit:10.2"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:2001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241257001",
|
||||
"Comment": "mediawiki-extensions-Math is earlier than 0:3.0.0.1.40-alt1.4cf19b0"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
34
oval/p10/ALT-PU-2024-1257/objects.json
Normal file
34
oval/p10/ALT-PU-2024-1257/objects.json
Normal file
@ -0,0 +1,34 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"dataType": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RpmInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241257001",
|
||||
"Version": "1",
|
||||
"comment": "mediawiki-extensions-Math is installed",
|
||||
"Name": "mediawiki-extensions-Math"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/p10/ALT-PU-2024-1257/states.json
Normal file
23
oval/p10/ALT-PU-2024-1257/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RpmInfoState": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241257001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:3.0.0.1.40-alt1.4cf19b0",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "0:3.0.0.1.40-alt1.4cf19b0",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
30
oval/p10/ALT-PU-2024-1257/tests.json
Normal file
30
oval/p10/ALT-PU-2024-1257/tests.json
Normal file
@ -0,0 +1,30 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241257001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mediawiki-extensions-Math is earlier than 0:3.0.0.1.40-alt1.4cf19b0",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241257001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241257001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
117
oval/p10/ALT-PU-2024-1332/definitions.json
Normal file
117
oval/p10/ALT-PU-2024-1332/definitions.json
Normal file
@ -0,0 +1,117 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:20241332",
|
||||
"Version": "oval:org.altlinux.errata:def:20241332",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-1332: package `choqok` update to version 1.7.0-alt4",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch p10"
|
||||
],
|
||||
"Products": [
|
||||
"ALT Server",
|
||||
"ALT Virtualization Server",
|
||||
"ALT Workstation",
|
||||
"ALT Workstation K",
|
||||
"ALT Education",
|
||||
"Simply Linux",
|
||||
"Starterkit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-1332",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1332",
|
||||
"Source": "ALTPU"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades choqok to version 1.7.0-alt4. \nSecurity Fix(es):\n\n * #48773: Сбой программы Choqok после удаления учетной записи",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "Low",
|
||||
"Rights": "Copyright 2023 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"bdu": null,
|
||||
"Bugzilla": [
|
||||
{
|
||||
"Id": "48773",
|
||||
"Href": "https://bugzilla.altlinux.org/48773",
|
||||
"Data": "Сбой программы Choqok после удаления учетной записи"
|
||||
}
|
||||
],
|
||||
"AffectedCpeList": {
|
||||
"Cpe": [
|
||||
"cpe:/o:alt:kworkstation:10",
|
||||
"cpe:/o:alt:workstation:10",
|
||||
"cpe:/o:alt:server:10",
|
||||
"cpe:/o:alt:server-v:10",
|
||||
"cpe:/o:alt:education:10",
|
||||
"cpe:/o:alt:slinux:10",
|
||||
"cpe:/o:alt:starterkit:p10",
|
||||
"cpe:/o:alt:kworkstation:10.1",
|
||||
"cpe:/o:alt:workstation:10.1",
|
||||
"cpe:/o:alt:server:10.1",
|
||||
"cpe:/o:alt:server-v:10.1",
|
||||
"cpe:/o:alt:education:10.1",
|
||||
"cpe:/o:alt:slinux:10.1",
|
||||
"cpe:/o:alt:starterkit:10.1",
|
||||
"cpe:/o:alt:kworkstation:10.2",
|
||||
"cpe:/o:alt:workstation:10.2",
|
||||
"cpe:/o:alt:server:10.2",
|
||||
"cpe:/o:alt:server-v:10.2",
|
||||
"cpe:/o:alt:education:10.2",
|
||||
"cpe:/o:alt:slinux:10.2",
|
||||
"cpe:/o:alt:starterkit:10.2"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:2001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241332001",
|
||||
"Comment": "choqok is earlier than 0:1.7.0-alt4"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241332002",
|
||||
"Comment": "choqok-devel is earlier than 0:1.7.0-alt4"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241332003",
|
||||
"Comment": "libchoqok1 is earlier than 0:1.7.0-alt4"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241332004",
|
||||
"Comment": "libgnusocialapihelper1 is earlier than 0:1.7.0-alt4"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241332005",
|
||||
"Comment": "libtwitterapihelper1 is earlier than 0:1.7.0-alt4"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
58
oval/p10/ALT-PU-2024-1332/objects.json
Normal file
58
oval/p10/ALT-PU-2024-1332/objects.json
Normal file
@ -0,0 +1,58 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"dataType": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RpmInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241332001",
|
||||
"Version": "1",
|
||||
"comment": "choqok is installed",
|
||||
"Name": "choqok"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241332002",
|
||||
"Version": "1",
|
||||
"comment": "choqok-devel is installed",
|
||||
"Name": "choqok-devel"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241332003",
|
||||
"Version": "1",
|
||||
"comment": "libchoqok1 is installed",
|
||||
"Name": "libchoqok1"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241332004",
|
||||
"Version": "1",
|
||||
"comment": "libgnusocialapihelper1 is installed",
|
||||
"Name": "libgnusocialapihelper1"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241332005",
|
||||
"Version": "1",
|
||||
"comment": "libtwitterapihelper1 is installed",
|
||||
"Name": "libtwitterapihelper1"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/p10/ALT-PU-2024-1332/states.json
Normal file
23
oval/p10/ALT-PU-2024-1332/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RpmInfoState": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241332001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:1.7.0-alt4",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "0:1.7.0-alt4",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
78
oval/p10/ALT-PU-2024-1332/tests.json
Normal file
78
oval/p10/ALT-PU-2024-1332/tests.json
Normal file
@ -0,0 +1,78 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241332001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "choqok is earlier than 0:1.7.0-alt4",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241332001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241332002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "choqok-devel is earlier than 0:1.7.0-alt4",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241332002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241332003",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libchoqok1 is earlier than 0:1.7.0-alt4",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241332003"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241332004",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libgnusocialapihelper1 is earlier than 0:1.7.0-alt4",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241332004"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241332005",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libtwitterapihelper1 is earlier than 0:1.7.0-alt4",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241332005"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241332001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
101
oval/p10/ALT-PU-2024-1357/definitions.json
Normal file
101
oval/p10/ALT-PU-2024-1357/definitions.json
Normal file
@ -0,0 +1,101 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:20241357",
|
||||
"Version": "oval:org.altlinux.errata:def:20241357",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-1357: package `php8.2-swoole` update to version 5.1.1-alt2.15",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch p10"
|
||||
],
|
||||
"Products": [
|
||||
"ALT Server",
|
||||
"ALT Virtualization Server",
|
||||
"ALT Workstation",
|
||||
"ALT Workstation K",
|
||||
"ALT Education",
|
||||
"Simply Linux",
|
||||
"Starterkit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-1357",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1357",
|
||||
"Source": "ALTPU"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades php8.2-swoole to version 5.1.1-alt2.15. \nSecurity Fix(es):\n\n * #49116: Ошибка сегментирования в php8.3, при наличии php8.3-swoole и php8.3-mysqlnd",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "Low",
|
||||
"Rights": "Copyright 2023 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"bdu": null,
|
||||
"Bugzilla": [
|
||||
{
|
||||
"Id": "49116",
|
||||
"Href": "https://bugzilla.altlinux.org/49116",
|
||||
"Data": "Ошибка сегментирования в php8.3, при наличии php8.3-swoole и php8.3-mysqlnd"
|
||||
}
|
||||
],
|
||||
"AffectedCpeList": {
|
||||
"Cpe": [
|
||||
"cpe:/o:alt:kworkstation:10",
|
||||
"cpe:/o:alt:workstation:10",
|
||||
"cpe:/o:alt:server:10",
|
||||
"cpe:/o:alt:server-v:10",
|
||||
"cpe:/o:alt:education:10",
|
||||
"cpe:/o:alt:slinux:10",
|
||||
"cpe:/o:alt:starterkit:p10",
|
||||
"cpe:/o:alt:kworkstation:10.1",
|
||||
"cpe:/o:alt:workstation:10.1",
|
||||
"cpe:/o:alt:server:10.1",
|
||||
"cpe:/o:alt:server-v:10.1",
|
||||
"cpe:/o:alt:education:10.1",
|
||||
"cpe:/o:alt:slinux:10.1",
|
||||
"cpe:/o:alt:starterkit:10.1",
|
||||
"cpe:/o:alt:kworkstation:10.2",
|
||||
"cpe:/o:alt:workstation:10.2",
|
||||
"cpe:/o:alt:server:10.2",
|
||||
"cpe:/o:alt:server-v:10.2",
|
||||
"cpe:/o:alt:education:10.2",
|
||||
"cpe:/o:alt:slinux:10.2",
|
||||
"cpe:/o:alt:starterkit:10.2"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:2001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241357001",
|
||||
"Comment": "php8.2-swoole is earlier than 0:5.1.1-alt2.15"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
34
oval/p10/ALT-PU-2024-1357/objects.json
Normal file
34
oval/p10/ALT-PU-2024-1357/objects.json
Normal file
@ -0,0 +1,34 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"dataType": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RpmInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241357001",
|
||||
"Version": "1",
|
||||
"comment": "php8.2-swoole is installed",
|
||||
"Name": "php8.2-swoole"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/p10/ALT-PU-2024-1357/states.json
Normal file
23
oval/p10/ALT-PU-2024-1357/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RpmInfoState": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241357001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:5.1.1-alt2.15",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "0:5.1.1-alt2.15",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
30
oval/p10/ALT-PU-2024-1357/tests.json
Normal file
30
oval/p10/ALT-PU-2024-1357/tests.json
Normal file
@ -0,0 +1,30 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241357001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "php8.2-swoole is earlier than 0:5.1.1-alt2.15",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241357001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241357001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
117
oval/p10/ALT-PU-2024-1386/definitions.json
Normal file
117
oval/p10/ALT-PU-2024-1386/definitions.json
Normal file
@ -0,0 +1,117 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:20241386",
|
||||
"Version": "oval:org.altlinux.errata:def:20241386",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-1386: package `jobe` update to version 1.9.0-alt1",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch p10"
|
||||
],
|
||||
"Products": [
|
||||
"ALT Server",
|
||||
"ALT Virtualization Server",
|
||||
"ALT Workstation",
|
||||
"ALT Workstation K",
|
||||
"ALT Education",
|
||||
"Simply Linux",
|
||||
"Starterkit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-1386",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-1386",
|
||||
"Source": "ALTPU"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2020-36642",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2020-36642",
|
||||
"Source": "CVE"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades jobe to version 1.9.0-alt1. \nSecurity Fix(es):\n\n * CVE-2020-36642: A vulnerability was found in trampgeek jobe up to 1.6.x and classified as critical. This issue affects the function run_in_sandbox of the file application/libraries/LanguageTask.php. The manipulation leads to command injection. Upgrading to version 1.7.0 is able to address this issue. The identifier of the patch is 8f43daf50c943b98eaf0c542da901a4a16e85b02. It is recommended to upgrade the affected component. The identifier VDB-217553 was assigned to this vulnerability.",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "Critical",
|
||||
"Rights": "Copyright 2023 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-01-30"
|
||||
},
|
||||
"bdu": null,
|
||||
"Cves": [
|
||||
{
|
||||
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"Cwe": "CWE-77",
|
||||
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2020-36642",
|
||||
"Impact": "Critical",
|
||||
"Public": "20230106",
|
||||
"CveID": "CVE-2020-36642"
|
||||
}
|
||||
],
|
||||
"AffectedCpeList": {
|
||||
"Cpe": [
|
||||
"cpe:/o:alt:kworkstation:10",
|
||||
"cpe:/o:alt:workstation:10",
|
||||
"cpe:/o:alt:server:10",
|
||||
"cpe:/o:alt:server-v:10",
|
||||
"cpe:/o:alt:education:10",
|
||||
"cpe:/o:alt:slinux:10",
|
||||
"cpe:/o:alt:starterkit:p10",
|
||||
"cpe:/o:alt:kworkstation:10.1",
|
||||
"cpe:/o:alt:workstation:10.1",
|
||||
"cpe:/o:alt:server:10.1",
|
||||
"cpe:/o:alt:server-v:10.1",
|
||||
"cpe:/o:alt:education:10.1",
|
||||
"cpe:/o:alt:slinux:10.1",
|
||||
"cpe:/o:alt:starterkit:10.1",
|
||||
"cpe:/o:alt:kworkstation:10.2",
|
||||
"cpe:/o:alt:workstation:10.2",
|
||||
"cpe:/o:alt:server:10.2",
|
||||
"cpe:/o:alt:server-v:10.2",
|
||||
"cpe:/o:alt:education:10.2",
|
||||
"cpe:/o:alt:slinux:10.2",
|
||||
"cpe:/o:alt:starterkit:10.2"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:2001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241386001",
|
||||
"Comment": "jobe is earlier than 0:1.9.0-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241386002",
|
||||
"Comment": "jobe-apache2 is earlier than 0:1.9.0-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:20241386003",
|
||||
"Comment": "jobe-mysql is earlier than 0:1.9.0-alt1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
46
oval/p10/ALT-PU-2024-1386/objects.json
Normal file
46
oval/p10/ALT-PU-2024-1386/objects.json
Normal file
@ -0,0 +1,46 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"dataType": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RpmInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241386001",
|
||||
"Version": "1",
|
||||
"comment": "jobe is installed",
|
||||
"Name": "jobe"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241386002",
|
||||
"Version": "1",
|
||||
"comment": "jobe-apache2 is installed",
|
||||
"Name": "jobe-apache2"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:20241386003",
|
||||
"Version": "1",
|
||||
"comment": "jobe-mysql is installed",
|
||||
"Name": "jobe-mysql"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/p10/ALT-PU-2024-1386/states.json
Normal file
23
oval/p10/ALT-PU-2024-1386/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RpmInfoState": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:20241386001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:1.9.0-alt1",
|
||||
"Arch": {},
|
||||
"Evr": {
|
||||
"Text": "0:1.9.0-alt1",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
54
oval/p10/ALT-PU-2024-1386/tests.json
Normal file
54
oval/p10/ALT-PU-2024-1386/tests.json
Normal file
@ -0,0 +1,54 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241386001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "jobe is earlier than 0:1.9.0-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241386001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241386001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241386002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "jobe-apache2 is earlier than 0:1.9.0-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241386002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241386001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:20241386003",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "jobe-mysql is earlier than 0:1.9.0-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:20241386003"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:20241386001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
Loading…
x
Reference in New Issue
Block a user