pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2024-10-01 03:05:37 +00:00
parent edbe02b05a
commit 1b47c73904
16 changed files with 4316 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

706
oval/c10f1/ALT-PU-2024-13166/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

88
oval/c10f1/ALT-PU-2024-13166/objects.json Normal file
View File

@ -0,0 +1,88 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:4001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202413166001",
"Version": "1",
"Comment": "kernel-doc-un is installed",
"Name": "kernel-doc-un"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166002",
"Version": "1",
"Comment": "kernel-headers-modules-un-def is installed",
"Name": "kernel-headers-modules-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166003",
"Version": "1",
"Comment": "kernel-headers-un-def is installed",
"Name": "kernel-headers-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166004",
"Version": "1",
"Comment": "kernel-image-domU-un-def is installed",
"Name": "kernel-image-domU-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166005",
"Version": "1",
"Comment": "kernel-image-un-def is installed",
"Name": "kernel-image-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166006",
"Version": "1",
"Comment": "kernel-image-un-def-checkinstall is installed",
"Name": "kernel-image-un-def-checkinstall"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166007",
"Version": "1",
"Comment": "kernel-modules-drm-ancient-un-def is installed",
"Name": "kernel-modules-drm-ancient-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166008",
"Version": "1",
"Comment": "kernel-modules-drm-nouveau-un-def is installed",
"Name": "kernel-modules-drm-nouveau-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166009",
"Version": "1",
"Comment": "kernel-modules-drm-un-def is installed",
"Name": "kernel-modules-drm-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202413166010",
"Version": "1",
"Comment": "kernel-modules-staging-un-def is installed",
"Name": "kernel-modules-staging-un-def"
}
]
}

23
oval/c10f1/ALT-PU-2024-13166/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:4001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202413166001",
"Version": "1",
"Comment": "package EVR is earlier than 1:6.1.111-alt0.c10f.1",
"Arch": {},
"EVR": {
"Text": "1:6.1.111-alt0.c10f.1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

138
oval/c10f1/ALT-PU-2024-13166/tests.json Normal file
View File

@ -0,0 +1,138 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:4001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:4001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:4001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202413166001",
"Version": "1",
"Check": "all",
"Comment": "kernel-doc-un is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166002",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-modules-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166003",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166004",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-domU-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166005",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166006",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-un-def-checkinstall is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166007",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-ancient-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166008",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-nouveau-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166009",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202413166010",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-staging-un-def is earlier than 1:6.1.111-alt0.c10f.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202413166010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202413166001"
}
}
]
}

275
oval/p10/ALT-PU-2024-12993/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

82
oval/p10/ALT-PU-2024-12993/objects.json Normal file
View File

@ -0,0 +1,82 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202412993001",
"Version": "1",
"Comment": "libpython3 is installed",
"Name": "libpython3"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993002",
"Version": "1",
"Comment": "python3 is installed",
"Name": "python3"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993003",
"Version": "1",
"Comment": "python3-base is installed",
"Name": "python3-base"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993004",
"Version": "1",
"Comment": "python3-dev is installed",
"Name": "python3-dev"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993005",
"Version": "1",
"Comment": "python3-modules-curses is installed",
"Name": "python3-modules-curses"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993006",
"Version": "1",
"Comment": "python3-modules-sqlite3 is installed",
"Name": "python3-modules-sqlite3"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993007",
"Version": "1",
"Comment": "python3-modules-tkinter is installed",
"Name": "python3-modules-tkinter"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993008",
"Version": "1",
"Comment": "python3-test is installed",
"Name": "python3-test"
},
{
"ID": "oval:org.altlinux.errata:obj:202412993009",
"Version": "1",
"Comment": "python3-tools is installed",
"Name": "python3-tools"
}
]
}

23
oval/p10/ALT-PU-2024-12993/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202412993001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.9.20-alt1",
"Arch": {},
"EVR": {
"Text": "0:3.9.20-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

126
oval/p10/ALT-PU-2024-12993/tests.json Normal file
View File

@ -0,0 +1,126 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202412993001",
"Version": "1",
"Check": "all",
"Comment": "libpython3 is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993002",
"Version": "1",
"Check": "all",
"Comment": "python3 is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993003",
"Version": "1",
"Check": "all",
"Comment": "python3-base is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993004",
"Version": "1",
"Check": "all",
"Comment": "python3-dev is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993005",
"Version": "1",
"Check": "all",
"Comment": "python3-modules-curses is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993006",
"Version": "1",
"Check": "all",
"Comment": "python3-modules-sqlite3 is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993007",
"Version": "1",
"Check": "all",
"Comment": "python3-modules-tkinter is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993008",
"Version": "1",
"Check": "all",
"Comment": "python3-test is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412993009",
"Version": "1",
"Check": "all",
"Comment": "python3-tools is earlier than 0:3.9.20-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412993009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412993001"
}
}
]
}

2184
oval/p9/ALT-PU-2024-12537/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

88
oval/p9/ALT-PU-2024-12537/objects.json Normal file
View File

@ -0,0 +1,88 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:1001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202412537001",
"Version": "1",
"Comment": "kernel-doc-un is installed",
"Name": "kernel-doc-un"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537002",
"Version": "1",
"Comment": "kernel-headers-modules-un-def is installed",
"Name": "kernel-headers-modules-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537003",
"Version": "1",
"Comment": "kernel-headers-un-def is installed",
"Name": "kernel-headers-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537004",
"Version": "1",
"Comment": "kernel-image-domU-un-def is installed",
"Name": "kernel-image-domU-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537005",
"Version": "1",
"Comment": "kernel-image-un-def is installed",
"Name": "kernel-image-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537006",
"Version": "1",
"Comment": "kernel-modules-drm-ancient-un-def is installed",
"Name": "kernel-modules-drm-ancient-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537007",
"Version": "1",
"Comment": "kernel-modules-drm-nouveau-un-def is installed",
"Name": "kernel-modules-drm-nouveau-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537008",
"Version": "1",
"Comment": "kernel-modules-drm-un-def is installed",
"Name": "kernel-modules-drm-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537009",
"Version": "1",
"Comment": "kernel-modules-ide-un-def is installed",
"Name": "kernel-modules-ide-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202412537010",
"Version": "1",
"Comment": "kernel-modules-staging-un-def is installed",
"Name": "kernel-modules-staging-un-def"
}
]
}

23
oval/p9/ALT-PU-2024-12537/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:1001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202412537001",
"Version": "1",
"Comment": "package EVR is earlier than 1:5.10.226-alt1",
"Arch": {},
"EVR": {
"Text": "1:5.10.226-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

138
oval/p9/ALT-PU-2024-12537/tests.json Normal file
View File

@ -0,0 +1,138 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:1001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p9' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:1001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:1001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202412537001",
"Version": "1",
"Check": "all",
"Comment": "kernel-doc-un is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537002",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-modules-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537003",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537004",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-domU-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537005",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537006",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-ancient-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537007",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-nouveau-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537008",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537009",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-ide-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412537010",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-staging-un-def is earlier than 1:5.10.226-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412537010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412537001"
}
}
]
}

173
oval/p9/ALT-PU-2024-12989/definitions.json Normal file
View File

@ -0,0 +1,173 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202412989",
"Version": "oval:org.altlinux.errata:def:202412989",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-12989: package `python3` update to version 3.7.17-alt3",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p9"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-12989",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-12989",
"Source": "ALTPU"
},
{
"RefID": "BDU:2023-04980",
"RefURL": "https://bdu.fstec.ru/vul/2023-04980",
"Source": "BDU"
},
{
"RefID": "CVE-2023-27043",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-27043",
"Source": "CVE"
},
{
"RefID": "CVE-2024-7592",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-7592",
"Source": "CVE"
}
],
"Description": "This update upgrades python3 to version 3.7.17-alt3. \nSecurity Fix(es):\n\n * BDU:2023-04980: Уязвимость модуля электронной почты интерпретатора языка программирования Python, позволяющая нарушителю обойти механизм защиты\n\n * CVE-2023-27043: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\n * CVE-2024-7592: There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-09-30"
},
"Updated": {
"Date": "2024-09-30"
},
"BDUs": [
{
"ID": "BDU:2023-04980",
"CVSS": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"CWE": "CWE-20",
"Href": "https://bdu.fstec.ru/vul/2023-04980",
"Impact": "Low",
"Public": "20230418"
}
],
"CVEs": [
{
"ID": "CVE-2023-27043",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"CWE": "CWE-20",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-27043",
"Impact": "Low",
"Public": "20230419"
},
{
"ID": "CVE-2024-7592",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-1333",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-7592",
"Impact": "High",
"Public": "20240819"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:9",
"cpe:/o:alt:workstation:9",
"cpe:/o:alt:server:9",
"cpe:/o:alt:server-v:9",
"cpe:/o:alt:education:9",
"cpe:/o:alt:slinux:9",
"cpe:/o:alt:starterkit:p9",
"cpe:/o:alt:kworkstation:9.1",
"cpe:/o:alt:workstation:9.1",
"cpe:/o:alt:server:9.1",
"cpe:/o:alt:server-v:9.1",
"cpe:/o:alt:education:9.1",
"cpe:/o:alt:slinux:9.1",
"cpe:/o:alt:starterkit:9.1",
"cpe:/o:alt:kworkstation:9.2",
"cpe:/o:alt:workstation:9.2",
"cpe:/o:alt:server:9.2",
"cpe:/o:alt:server-v:9.2",
"cpe:/o:alt:education:9.2",
"cpe:/o:alt:slinux:9.2",
"cpe:/o:alt:starterkit:9.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:1001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202412989001",
"Comment": "libpython3 is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989002",
"Comment": "python3 is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989003",
"Comment": "python3-base is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989004",
"Comment": "python3-dev is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989005",
"Comment": "python3-modules-curses is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989006",
"Comment": "python3-modules-nis is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989007",
"Comment": "python3-modules-sqlite3 is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989008",
"Comment": "python3-modules-tkinter is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989009",
"Comment": "python3-test is earlier than 0:3.7.17-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202412989010",
"Comment": "python3-tools is earlier than 0:3.7.17-alt3"
}
]
}
]
}
}
]
}

88
oval/p9/ALT-PU-2024-12989/objects.json Normal file
View File

@ -0,0 +1,88 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:1001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202412989001",
"Version": "1",
"Comment": "libpython3 is installed",
"Name": "libpython3"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989002",
"Version": "1",
"Comment": "python3 is installed",
"Name": "python3"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989003",
"Version": "1",
"Comment": "python3-base is installed",
"Name": "python3-base"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989004",
"Version": "1",
"Comment": "python3-dev is installed",
"Name": "python3-dev"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989005",
"Version": "1",
"Comment": "python3-modules-curses is installed",
"Name": "python3-modules-curses"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989006",
"Version": "1",
"Comment": "python3-modules-nis is installed",
"Name": "python3-modules-nis"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989007",
"Version": "1",
"Comment": "python3-modules-sqlite3 is installed",
"Name": "python3-modules-sqlite3"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989008",
"Version": "1",
"Comment": "python3-modules-tkinter is installed",
"Name": "python3-modules-tkinter"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989009",
"Version": "1",
"Comment": "python3-test is installed",
"Name": "python3-test"
},
{
"ID": "oval:org.altlinux.errata:obj:202412989010",
"Version": "1",
"Comment": "python3-tools is installed",
"Name": "python3-tools"
}
]
}

23
oval/p9/ALT-PU-2024-12989/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:1001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202412989001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.7.17-alt3",
"Arch": {},
"EVR": {
"Text": "0:3.7.17-alt3",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

138
oval/p9/ALT-PU-2024-12989/tests.json Normal file
View File

@ -0,0 +1,138 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:1001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p9' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:1001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:1001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202412989001",
"Version": "1",
"Check": "all",
"Comment": "libpython3 is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989002",
"Version": "1",
"Check": "all",
"Comment": "python3 is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989003",
"Version": "1",
"Check": "all",
"Comment": "python3-base is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989004",
"Version": "1",
"Check": "all",
"Comment": "python3-dev is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989005",
"Version": "1",
"Check": "all",
"Comment": "python3-modules-curses is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989006",
"Version": "1",
"Check": "all",
"Comment": "python3-modules-nis is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989007",
"Version": "1",
"Check": "all",
"Comment": "python3-modules-sqlite3 is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989008",
"Version": "1",
"Check": "all",
"Comment": "python3-modules-tkinter is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989009",
"Version": "1",
"Check": "all",
"Comment": "python3-test is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202412989010",
"Version": "1",
"Check": "all",
"Comment": "python3-tools is earlier than 0:3.7.17-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202412989010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202412989001"
}
}
]
}