pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2025-01-16 06:06:08 +00:00
parent 2689cf17d3
commit 3df3a9d47e
80 changed files with 5145 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

105
oval/c10f1/ALT-PU-2017-3596/definitions.json Normal file
View File

@ -0,0 +1,105 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173596",
"Version": "oval:org.altlinux.errata:def:20173596",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3596: package `apache-commons-io` update to version 2.6-alt1_1jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f1"
],
"Products": [
"ALT SP Workstation",
"ALT SP Server"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3596",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3596",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.6-alt1_1jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173596001",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173596002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8"
}
]
}
]
}
}
]
}

40
oval/c10f1/ALT-PU-2017-3596/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173596001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173596002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/c10f1/ALT-PU-2017-3596/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173596001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.6-alt1_1jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.6-alt1_1jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c10f1/ALT-PU-2017-3596/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173596001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173596002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
}
]
}

105
oval/c10f1/ALT-PU-2017-3597/definitions.json Normal file
View File

@ -0,0 +1,105 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173597",
"Version": "oval:org.altlinux.errata:def:20173597",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3597: package `apache-commons-io` update to version 2.5-alt1_2jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f1"
],
"Products": [
"ALT SP Workstation",
"ALT SP Server"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3597",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3597",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.5-alt1_2jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173597001",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173597002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8"
}
]
}
]
}
}
]
}

40
oval/c10f1/ALT-PU-2017-3597/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173597001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173597002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/c10f1/ALT-PU-2017-3597/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173597001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.5-alt1_2jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.5-alt1_2jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c10f1/ALT-PU-2017-3597/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173597001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173597002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
}
]
}

105
oval/c10f1/ALT-PU-2021-4854/definitions.json Normal file
View File

@ -0,0 +1,105 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20214854",
"Version": "oval:org.altlinux.errata:def:20214854",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2021-4854: package `apache-commons-io` update to version 2.8.0-alt1_3jpp11",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f1"
],
"Products": [
"ALT SP Workstation",
"ALT SP Server"
]
}
],
"References": [
{
"RefID": "ALT-PU-2021-4854",
"RefURL": "https://errata.altlinux.org/ALT-PU-2021-4854",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.8.0-alt1_3jpp11. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20214854001",
"Comment": "apache-commons-io is earlier than 1:2.8.0-alt1_3jpp11"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20214854002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.8.0-alt1_3jpp11"
}
]
}
]
}
}
]
}

40
oval/c10f1/ALT-PU-2021-4854/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20214854001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20214854002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/c10f1/ALT-PU-2021-4854/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20214854001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.8.0-alt1_3jpp11",
"Arch": {},
"EVR": {
"Text": "1:2.8.0-alt1_3jpp11",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c10f1/ALT-PU-2021-4854/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20214854001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.8.0-alt1_3jpp11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20214854001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20214854001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20214854002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.8.0-alt1_3jpp11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20214854002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20214854001"
}
}
]
}

105
oval/c9f2/ALT-PU-2017-3596/definitions.json Normal file
View File

@ -0,0 +1,105 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173596",
"Version": "oval:org.altlinux.errata:def:20173596",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3596: package `apache-commons-io` update to version 2.6-alt1_1jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3596",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3596",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.6-alt1_1jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:4001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173596001",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173596002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8"
}
]
}
]
}
}
]
}

40
oval/c9f2/ALT-PU-2017-3596/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:4001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173596001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173596002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/c9f2/ALT-PU-2017-3596/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:4001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173596001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.6-alt1_1jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.6-alt1_1jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c9f2/ALT-PU-2017-3596/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:4001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:4001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:4001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173596001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173596002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
}
]
}

105
oval/c9f2/ALT-PU-2017-3597/definitions.json Normal file
View File

@ -0,0 +1,105 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173597",
"Version": "oval:org.altlinux.errata:def:20173597",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3597: package `apache-commons-io` update to version 2.5-alt1_2jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3597",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3597",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.5-alt1_2jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:4001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173597001",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173597002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8"
}
]
}
]
}
}
]
}

40
oval/c9f2/ALT-PU-2017-3597/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:4001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173597001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173597002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/c9f2/ALT-PU-2017-3597/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:4001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173597001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.5-alt1_2jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.5-alt1_2jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c9f2/ALT-PU-2017-3597/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:4001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:4001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:4001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173597001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173597002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
}
]
}

118
oval/p10/ALT-PU-2017-3596/definitions.json Normal file
View File

@ -0,0 +1,118 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173596",
"Version": "oval:org.altlinux.errata:def:20173596",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3596: package `apache-commons-io` update to version 2.6-alt1_1jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit",
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3596",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3596",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.6-alt1_1jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:container:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173596001",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173596002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8"
}
]
}
]
}
}
]
}

40
oval/p10/ALT-PU-2017-3596/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173596001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173596002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p10/ALT-PU-2017-3596/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173596001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.6-alt1_1jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.6-alt1_1jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p10/ALT-PU-2017-3596/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173596001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173596002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
}
]
}

118
oval/p10/ALT-PU-2017-3597/definitions.json Normal file
View File

@ -0,0 +1,118 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173597",
"Version": "oval:org.altlinux.errata:def:20173597",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3597: package `apache-commons-io` update to version 2.5-alt1_2jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit",
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3597",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3597",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.5-alt1_2jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:container:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173597001",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173597002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8"
}
]
}
]
}
}
]
}

40
oval/p10/ALT-PU-2017-3597/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173597001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173597002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p10/ALT-PU-2017-3597/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173597001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.5-alt1_2jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.5-alt1_2jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p10/ALT-PU-2017-3597/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173597001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173597002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
}
]
}

118
oval/p10/ALT-PU-2021-4854/definitions.json Normal file
View File

@ -0,0 +1,118 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20214854",
"Version": "oval:org.altlinux.errata:def:20214854",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2021-4854: package `apache-commons-io` update to version 2.8.0-alt1_3jpp11",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit",
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2021-4854",
"RefURL": "https://errata.altlinux.org/ALT-PU-2021-4854",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.8.0-alt1_3jpp11. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:container:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20214854001",
"Comment": "apache-commons-io is earlier than 1:2.8.0-alt1_3jpp11"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20214854002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.8.0-alt1_3jpp11"
}
]
}
]
}
}
]
}

40
oval/p10/ALT-PU-2021-4854/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20214854001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20214854002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p10/ALT-PU-2021-4854/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20214854001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.8.0-alt1_3jpp11",
"Arch": {},
"EVR": {
"Text": "1:2.8.0-alt1_3jpp11",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p10/ALT-PU-2021-4854/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20214854001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.8.0-alt1_3jpp11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20214854001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20214854001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20214854002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.8.0-alt1_3jpp11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20214854002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20214854001"
}
}
]
}

95
oval/p10/ALT-PU-2025-1173/definitions.json Normal file
View File

@ -0,0 +1,95 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20251173",
"Version": "oval:org.altlinux.errata:def:20251173",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2025-1173: package `userpasswd` update to version 0.3.6-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit",
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2025-1173",
"RefURL": "https://errata.altlinux.org/ALT-PU-2025-1173",
"Source": "ALTPU"
}
],
"Description": "This update upgrades userpasswd to version 0.3.6-alt1. \nSecurity Fix(es):\n\n * #49619: Не меняется доменный пароль\n\n * #52549: Не показывает ошибку при passwd: Weak password",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-15"
},
"Updated": {
"Date": "2025-01-15"
},
"BDUs": null,
"Bugzilla": [
{
"ID": "49619",
"Href": "https://bugzilla.altlinux.org/49619",
"Data": "Не меняется доменный пароль"
},
{
"ID": "52549",
"Href": "https://bugzilla.altlinux.org/52549",
"Data": "Не показывает ошибку при passwd: Weak password"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:container:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20251173001",
"Comment": "userpasswd is earlier than 0:0.3.6-alt1"
}
]
}
]
}
}
]
}

34
oval/p10/ALT-PU-2025-1173/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20251173001",
"Version": "1",
"Comment": "userpasswd is installed",
"Name": "userpasswd"
}
]
}

23
oval/p10/ALT-PU-2025-1173/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20251173001",
"Version": "1",
"Comment": "package EVR is earlier than 0:0.3.6-alt1",
"Arch": {},
"EVR": {
"Text": "0:0.3.6-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/p10/ALT-PU-2025-1173/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20251173001",
"Version": "1",
"Check": "all",
"Comment": "userpasswd is earlier than 0:0.3.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251173001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251173001"
}
}
]
}

238
oval/p10/ALT-PU-2025-1288/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

88
oval/p10/ALT-PU-2025-1288/objects.json Normal file
View File

@ -0,0 +1,88 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20251288001",
"Version": "1",
"Comment": "kernel-doc-un is installed",
"Name": "kernel-doc-un"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288002",
"Version": "1",
"Comment": "kernel-headers-modules-un-def is installed",
"Name": "kernel-headers-modules-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288003",
"Version": "1",
"Comment": "kernel-headers-un-def is installed",
"Name": "kernel-headers-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288004",
"Version": "1",
"Comment": "kernel-image-domU-un-def is installed",
"Name": "kernel-image-domU-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288005",
"Version": "1",
"Comment": "kernel-image-un-def is installed",
"Name": "kernel-image-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288006",
"Version": "1",
"Comment": "kernel-image-un-def-checkinstall is installed",
"Name": "kernel-image-un-def-checkinstall"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288007",
"Version": "1",
"Comment": "kernel-modules-drm-ancient-un-def is installed",
"Name": "kernel-modules-drm-ancient-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288008",
"Version": "1",
"Comment": "kernel-modules-drm-nouveau-un-def is installed",
"Name": "kernel-modules-drm-nouveau-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288009",
"Version": "1",
"Comment": "kernel-modules-drm-un-def is installed",
"Name": "kernel-modules-drm-un-def"
},
{
"ID": "oval:org.altlinux.errata:obj:20251288010",
"Version": "1",
"Comment": "kernel-modules-staging-un-def is installed",
"Name": "kernel-modules-staging-un-def"
}
]
}

23
oval/p10/ALT-PU-2025-1288/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20251288001",
"Version": "1",
"Comment": "package EVR is earlier than 1:6.1.123-alt1",
"Arch": {},
"EVR": {
"Text": "1:6.1.123-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

138
oval/p10/ALT-PU-2025-1288/tests.json Normal file
View File

@ -0,0 +1,138 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20251288001",
"Version": "1",
"Check": "all",
"Comment": "kernel-doc-un is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288002",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-modules-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288003",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288004",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-domU-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288005",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288006",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-un-def-checkinstall is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288007",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-ancient-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288008",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-nouveau-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288009",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251288010",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-staging-un-def is earlier than 1:6.1.123-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251288010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251288001"
}
}
]
}

103
oval/p11/ALT-PU-2017-3596/definitions.json Normal file
View File

@ -0,0 +1,103 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173596",
"Version": "oval:org.altlinux.errata:def:20173596",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3596: package `apache-commons-io` update to version 2.6-alt1_1jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p11"
],
"Products": [
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3596",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3596",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.6-alt1_1jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:container:11"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173596001",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173596002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8"
}
]
}
]
}
}
]
}

40
oval/p11/ALT-PU-2017-3596/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173596001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173596002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p11/ALT-PU-2017-3596/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173596001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.6-alt1_1jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.6-alt1_1jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p11/ALT-PU-2017-3596/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p11' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173596001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173596002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
}
]
}

103
oval/p11/ALT-PU-2017-3597/definitions.json Normal file
View File

@ -0,0 +1,103 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173597",
"Version": "oval:org.altlinux.errata:def:20173597",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3597: package `apache-commons-io` update to version 2.5-alt1_2jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p11"
],
"Products": [
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3597",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3597",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.5-alt1_2jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:container:11"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173597001",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173597002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8"
}
]
}
]
}
}
]
}

40
oval/p11/ALT-PU-2017-3597/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173597001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173597002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p11/ALT-PU-2017-3597/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173597001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.5-alt1_2jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.5-alt1_2jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p11/ALT-PU-2017-3597/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p11' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173597001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173597002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
}
]
}

103
oval/p11/ALT-PU-2021-4854/definitions.json Normal file
View File

@ -0,0 +1,103 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20214854",
"Version": "oval:org.altlinux.errata:def:20214854",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2021-4854: package `apache-commons-io` update to version 2.8.0-alt1_3jpp11",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p11"
],
"Products": [
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2021-4854",
"RefURL": "https://errata.altlinux.org/ALT-PU-2021-4854",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.8.0-alt1_3jpp11. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:container:11"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20214854001",
"Comment": "apache-commons-io is earlier than 1:2.8.0-alt1_3jpp11"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20214854002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.8.0-alt1_3jpp11"
}
]
}
]
}
}
]
}

40
oval/p11/ALT-PU-2021-4854/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20214854001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20214854002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p11/ALT-PU-2021-4854/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20214854001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.8.0-alt1_3jpp11",
"Arch": {},
"EVR": {
"Text": "1:2.8.0-alt1_3jpp11",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p11/ALT-PU-2021-4854/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p11' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20214854001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.8.0-alt1_3jpp11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20214854001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20214854001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20214854002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.8.0-alt1_3jpp11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20214854002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20214854001"
}
}
]
}

80
oval/p11/ALT-PU-2025-1216/definitions.json Normal file
View File

@ -0,0 +1,80 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20251216",
"Version": "oval:org.altlinux.errata:def:20251216",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2025-1216: package `gpupdate` update to version 0.12.2-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p11"
],
"Products": [
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2025-1216",
"RefURL": "https://errata.altlinux.org/ALT-PU-2025-1216",
"Source": "ALTPU"
}
],
"Description": "This update upgrades gpupdate to version 0.12.2-alt1. \nSecurity Fix(es):\n\n * #52597: Error creating environment variables при применении политики Обои рабочего стола\n\n * #52683: Неправильно работают политики Thunderbird",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-15"
},
"Updated": {
"Date": "2025-01-15"
},
"BDUs": null,
"Bugzilla": [
{
"ID": "52597",
"Href": "https://bugzilla.altlinux.org/52597",
"Data": "Error creating environment variables при применении политики Обои рабочего стола"
},
{
"ID": "52683",
"Href": "https://bugzilla.altlinux.org/52683",
"Data": "Неправильно работают политики Thunderbird"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:container:11"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20251216001",
"Comment": "gpupdate is earlier than 0:0.12.2-alt1"
}
]
}
]
}
}
]
}

34
oval/p11/ALT-PU-2025-1216/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20251216001",
"Version": "1",
"Comment": "gpupdate is installed",
"Name": "gpupdate"
}
]
}

23
oval/p11/ALT-PU-2025-1216/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20251216001",
"Version": "1",
"Comment": "package EVR is earlier than 0:0.12.2-alt1",
"Arch": {},
"EVR": {
"Text": "0:0.12.2-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/p11/ALT-PU-2025-1216/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p11' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20251216001",
"Version": "1",
"Check": "all",
"Comment": "gpupdate is earlier than 0:0.12.2-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251216001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251216001"
}
}
]
}

96
oval/p11/ALT-PU-2025-1220/definitions.json Normal file
View File

@ -0,0 +1,96 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20251220",
"Version": "oval:org.altlinux.errata:def:20251220",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2025-1220: package `plasma-desktop` update to version 6.2.5-alt2",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p11"
],
"Products": [
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2025-1220",
"RefURL": "https://errata.altlinux.org/ALT-PU-2025-1220",
"Source": "ALTPU"
}
],
"Description": "This update upgrades plasma-desktop to version 6.2.5-alt2. \nSecurity Fix(es):\n\n * #44693: Виджет \"Переключение комнат\" некорректно отображается, если добавить комнату\n\n * #52671: Не прогружается панель задач (только значки) после обновления до Plasma 6.2.5",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-15"
},
"Updated": {
"Date": "2025-01-15"
},
"BDUs": null,
"Bugzilla": [
{
"ID": "44693",
"Href": "https://bugzilla.altlinux.org/44693",
"Data": "Виджет \"Переключение комнат\" некорректно отображается, если добавить комнату"
},
{
"ID": "52671",
"Href": "https://bugzilla.altlinux.org/52671",
"Data": "Не прогружается панель задач (только значки) после обновления до Plasma 6.2.5"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:container:11"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20251220001",
"Comment": "plasma-desktop is earlier than 0:6.2.5-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20251220002",
"Comment": "plasma-desktop-common is earlier than 0:6.2.5-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20251220003",
"Comment": "plasma-desktop-devel is earlier than 0:6.2.5-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20251220004",
"Comment": "polkit-kde-plasma-desktop is earlier than 0:6.2.5-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20251220005",
"Comment": "sddm-theme-breeze is earlier than 1:6.2.5-alt2"
}
]
}
]
}
}
]
}

58
oval/p11/ALT-PU-2025-1220/objects.json Normal file
View File

@ -0,0 +1,58 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20251220001",
"Version": "1",
"Comment": "plasma-desktop is installed",
"Name": "plasma-desktop"
},
{
"ID": "oval:org.altlinux.errata:obj:20251220002",
"Version": "1",
"Comment": "plasma-desktop-common is installed",
"Name": "plasma-desktop-common"
},
{
"ID": "oval:org.altlinux.errata:obj:20251220003",
"Version": "1",
"Comment": "plasma-desktop-devel is installed",
"Name": "plasma-desktop-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20251220004",
"Version": "1",
"Comment": "polkit-kde-plasma-desktop is installed",
"Name": "polkit-kde-plasma-desktop"
},
{
"ID": "oval:org.altlinux.errata:obj:20251220005",
"Version": "1",
"Comment": "sddm-theme-breeze is installed",
"Name": "sddm-theme-breeze"
}
]
}

35
oval/p11/ALT-PU-2025-1220/states.json Normal file
View File

@ -0,0 +1,35 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20251220001",
"Version": "1",
"Comment": "package EVR is earlier than 0:6.2.5-alt2",
"Arch": {},
"EVR": {
"Text": "0:6.2.5-alt2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
},
{
"ID": "oval:org.altlinux.errata:ste:20251220002",
"Version": "1",
"Comment": "package EVR is earlier than 1:6.2.5-alt2",
"Arch": {},
"EVR": {
"Text": "1:6.2.5-alt2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

78
oval/p11/ALT-PU-2025-1220/tests.json Normal file
View File

@ -0,0 +1,78 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p11' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20251220001",
"Version": "1",
"Check": "all",
"Comment": "plasma-desktop is earlier than 0:6.2.5-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251220001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251220001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251220002",
"Version": "1",
"Check": "all",
"Comment": "plasma-desktop-common is earlier than 0:6.2.5-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251220002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251220001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251220003",
"Version": "1",
"Check": "all",
"Comment": "plasma-desktop-devel is earlier than 0:6.2.5-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251220003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251220001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251220004",
"Version": "1",
"Check": "all",
"Comment": "polkit-kde-plasma-desktop is earlier than 0:6.2.5-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251220004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251220001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251220005",
"Version": "1",
"Check": "all",
"Comment": "sddm-theme-breeze is earlier than 1:6.2.5-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251220005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251220002"
}
}
]
}

134
oval/p11/ALT-PU-2025-1240/definitions.json Normal file
View File

@ -0,0 +1,134 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20251240",
"Version": "oval:org.altlinux.errata:def:20251240",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2025-1240: package `rsync` update to version 3.2.7-alt2",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p11"
],
"Products": [
"ALT Container"
]
}
],
"References": [
{
"RefID": "ALT-PU-2025-1240",
"RefURL": "https://errata.altlinux.org/ALT-PU-2025-1240",
"Source": "ALTPU"
},
{
"RefID": "CVE-2024-12084",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-12084",
"Source": "CVE"
},
{
"RefID": "CVE-2024-12085",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-12085",
"Source": "CVE"
},
{
"RefID": "CVE-2024-12086",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-12086",
"Source": "CVE"
},
{
"RefID": "CVE-2024-12087",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-12087",
"Source": "CVE"
},
{
"RefID": "CVE-2024-12088",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-12088",
"Source": "CVE"
},
{
"RefID": "CVE-2024-12747",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-12747",
"Source": "CVE"
}
],
"Description": "This update upgrades rsync to version 3.2.7-alt2. \nSecurity Fix(es):\n\n * CVE-2024-12084: description unavailable\n\n * CVE-2024-12085: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.\n\n * CVE-2024-12086: A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.\n\n * CVE-2024-12087: A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.\n\n * CVE-2024-12088: A flaw was found in rsync. When using the `--safe-links` option, rsync fails to properly verify if a symbolic link destination contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.\n\n * CVE-2024-12747: A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-15"
},
"Updated": {
"Date": "2025-01-15"
},
"BDUs": null,
"CVEs": [
{
"ID": "CVE-2024-12085",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-12085",
"Impact": "None",
"Public": "20250114"
},
{
"ID": "CVE-2024-12086",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-12086",
"Impact": "None",
"Public": "20250114"
},
{
"ID": "CVE-2024-12087",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-12087",
"Impact": "None",
"Public": "20250114"
},
{
"ID": "CVE-2024-12088",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-12088",
"Impact": "None",
"Public": "20250114"
},
{
"ID": "CVE-2024-12747",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-12747",
"Impact": "None",
"Public": "20250114"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:container:11"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20251240001",
"Comment": "rsync is earlier than 0:3.2.7-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20251240002",
"Comment": "rsync-server is earlier than 0:3.2.7-alt2"
}
]
}
]
}
}
]
}

40
oval/p11/ALT-PU-2025-1240/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20251240001",
"Version": "1",
"Comment": "rsync is installed",
"Name": "rsync"
},
{
"ID": "oval:org.altlinux.errata:obj:20251240002",
"Version": "1",
"Comment": "rsync-server is installed",
"Name": "rsync-server"
}
]
}

23
oval/p11/ALT-PU-2025-1240/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20251240001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.2.7-alt2",
"Arch": {},
"EVR": {
"Text": "0:3.2.7-alt2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p11/ALT-PU-2025-1240/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p11' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20251240001",
"Version": "1",
"Check": "all",
"Comment": "rsync is earlier than 0:3.2.7-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251240001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251240001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251240002",
"Version": "1",
"Check": "all",
"Comment": "rsync-server is earlier than 0:3.2.7-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251240002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251240001"
}
}
]
}

338
oval/p11/ALT-PU-2025-1256/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

46
oval/p11/ALT-PU-2025-1256/objects.json Normal file
View File

@ -0,0 +1,46 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20251256001",
"Version": "1",
"Comment": "kernel-headers-modules-pine is installed",
"Name": "kernel-headers-modules-pine"
},
{
"ID": "oval:org.altlinux.errata:obj:20251256002",
"Version": "1",
"Comment": "kernel-headers-pine is installed",
"Name": "kernel-headers-pine"
},
{
"ID": "oval:org.altlinux.errata:obj:20251256003",
"Version": "1",
"Comment": "kernel-image-pine is installed",
"Name": "kernel-image-pine"
}
]
}

23
oval/p11/ALT-PU-2025-1256/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20251256001",
"Version": "1",
"Comment": "package EVR is earlier than 1:6.12.9-alt1",
"Arch": {},
"EVR": {
"Text": "1:6.12.9-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

54
oval/p11/ALT-PU-2025-1256/tests.json Normal file
View File

@ -0,0 +1,54 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p11' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20251256001",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-modules-pine is earlier than 1:6.12.9-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251256001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251256001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251256002",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-pine is earlier than 1:6.12.9-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251256002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251256001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251256003",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-pine is earlier than 1:6.12.9-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251256003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251256001"
}
}
]
}

115
oval/p9/ALT-PU-2017-3596/definitions.json Normal file
View File

@ -0,0 +1,115 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173596",
"Version": "oval:org.altlinux.errata:def:20173596",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3596: package `apache-commons-io` update to version 2.6-alt1_1jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p9"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3596",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3596",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.6-alt1_1jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:9",
"cpe:/o:alt:workstation:9",
"cpe:/o:alt:server:9",
"cpe:/o:alt:server-v:9",
"cpe:/o:alt:education:9",
"cpe:/o:alt:slinux:9",
"cpe:/o:alt:starterkit:p9"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:1001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173596001",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173596002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8"
}
]
}
]
}
}
]
}

40
oval/p9/ALT-PU-2017-3596/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:1001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173596001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173596002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p9/ALT-PU-2017-3596/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:1001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173596001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.6-alt1_1jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.6-alt1_1jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p9/ALT-PU-2017-3596/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:1001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p9' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:1001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:1001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173596001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173596002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.6-alt1_1jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173596002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173596001"
}
}
]
}

115
oval/p9/ALT-PU-2017-3597/definitions.json Normal file
View File

@ -0,0 +1,115 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20173597",
"Version": "oval:org.altlinux.errata:def:20173597",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2017-3597: package `apache-commons-io` update to version 2.5-alt1_2jpp8",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p9"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2017-3597",
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-3597",
"Source": "ALTPU"
},
{
"RefID": "BDU:2021-02220",
"RefURL": "https://bdu.fstec.ru/vul/2021-02220",
"Source": "BDU"
},
{
"RefID": "CVE-2021-29425",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Source": "CVE"
}
],
"Description": "This update upgrades apache-commons-io to version 2.5-alt1_2jpp8. \nSecurity Fix(es):\n\n * BDU:2021-02220: Уязвимость метода FileNameUtils.normalize библиотеки Apache Commons IO, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации\n\n * CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2025-01-16"
},
"Updated": {
"Date": "2025-01-16"
},
"BDUs": [
{
"ID": "BDU:2021-02220",
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"CWE": "CWE-20, CWE-22",
"Href": "https://bdu.fstec.ru/vul/2021-02220",
"Impact": "Low",
"Public": "20210413"
}
],
"CVEs": [
{
"ID": "CVE-2021-29425",
"CVSS": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"CWE": "CWE-22",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-29425",
"Impact": "Low",
"Public": "20210413"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:9",
"cpe:/o:alt:workstation:9",
"cpe:/o:alt:server:9",
"cpe:/o:alt:server-v:9",
"cpe:/o:alt:education:9",
"cpe:/o:alt:slinux:9",
"cpe:/o:alt:starterkit:p9"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:1001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20173597001",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20173597002",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8"
}
]
}
]
}
}
]
}

40
oval/p9/ALT-PU-2017-3597/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:1001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20173597001",
"Version": "1",
"Comment": "apache-commons-io is installed",
"Name": "apache-commons-io"
},
{
"ID": "oval:org.altlinux.errata:obj:20173597002",
"Version": "1",
"Comment": "apache-commons-io-javadoc is installed",
"Name": "apache-commons-io-javadoc"
}
]
}

23
oval/p9/ALT-PU-2017-3597/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:1001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20173597001",
"Version": "1",
"Comment": "package EVR is earlier than 1:2.5-alt1_2jpp8",
"Arch": {},
"EVR": {
"Text": "1:2.5-alt1_2jpp8",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p9/ALT-PU-2017-3597/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:1001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p9' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:1001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:1001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20173597001",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20173597002",
"Version": "1",
"Check": "all",
"Comment": "apache-commons-io-javadoc is earlier than 1:2.5-alt1_2jpp8",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20173597002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20173597001"
}
}
]
}

346
oval/p9/ALT-PU-2025-1184/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

76
oval/p9/ALT-PU-2025-1184/objects.json Normal file
View File

@ -0,0 +1,76 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:1001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20251184001",
"Version": "1",
"Comment": "libcrypto1.1 is installed",
"Name": "libcrypto1.1"
},
{
"ID": "oval:org.altlinux.errata:obj:20251184002",
"Version": "1",
"Comment": "libssl-devel is installed",
"Name": "libssl-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20251184003",
"Version": "1",
"Comment": "libssl-devel-static is installed",
"Name": "libssl-devel-static"
},
{
"ID": "oval:org.altlinux.errata:obj:20251184004",
"Version": "1",
"Comment": "libssl1.1 is installed",
"Name": "libssl1.1"
},
{
"ID": "oval:org.altlinux.errata:obj:20251184005",
"Version": "1",
"Comment": "openssl is installed",
"Name": "openssl"
},
{
"ID": "oval:org.altlinux.errata:obj:20251184006",
"Version": "1",
"Comment": "openssl-doc is installed",
"Name": "openssl-doc"
},
{
"ID": "oval:org.altlinux.errata:obj:20251184007",
"Version": "1",
"Comment": "openssl-engines is installed",
"Name": "openssl-engines"
},
{
"ID": "oval:org.altlinux.errata:obj:20251184008",
"Version": "1",
"Comment": "tsget is installed",
"Name": "tsget"
}
]
}

23
oval/p9/ALT-PU-2025-1184/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:1001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:20251184001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.1.1w-alt0.p10.2",
"Arch": {},
"EVR": {
"Text": "0:1.1.1w-alt0.p10.2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

114
oval/p9/ALT-PU-2025-1184/tests.json Normal file
View File

@ -0,0 +1,114 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:1001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p9' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:1001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:1001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20251184001",
"Version": "1",
"Check": "all",
"Comment": "libcrypto1.1 is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251184002",
"Version": "1",
"Check": "all",
"Comment": "libssl-devel is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251184003",
"Version": "1",
"Check": "all",
"Comment": "libssl-devel-static is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251184004",
"Version": "1",
"Check": "all",
"Comment": "libssl1.1 is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251184005",
"Version": "1",
"Check": "all",
"Comment": "openssl is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251184006",
"Version": "1",
"Check": "all",
"Comment": "openssl-doc is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251184007",
"Version": "1",
"Check": "all",
"Comment": "openssl-engines is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20251184008",
"Version": "1",
"Check": "all",
"Comment": "tsget is earlier than 0:1.1.1w-alt0.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20251184008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20251184001"
}
}
]
}