ALT Vulnerability

2024-11-29 03:05:46 +00:00 · 2024-11-29 03:05:46 +00:00 · 46a28cad75
commit 46a28cad75
parent 3edda6c083
20 changed files with 1313 additions and 0 deletions
--- a/oval/c10f1/ALT-PU-2024-16208/definitions.json
+++ b/oval/c10f1/ALT-PU-2024-16208/definitions.json
@ -0,0 +1,105 @@
+{
+  "Definition": [
+    {
+      "ID": "oval:org.altlinux.errata:def:202416208",
+      "Version": "oval:org.altlinux.errata:def:202416208",
+      "Class": "patch",
+      "Metadata": {
+        "Title": "ALT-PU-2024-16208: package `python3-module-nltk` update to version 3.9.1-alt2.c10f1.1",
+        "AffectedList": [
+          {
+            "Family": "unix",
+            "Platforms": [
+              "ALT Linux branch c10f1"
+            ],
+            "Products": [
+              "ALT SP Workstation",
+              "ALT SP Server"
+            ]
+          }
+        ],
+        "References": [
+          {
+            "RefID": "ALT-PU-2024-16208",
+            "RefURL": "https://errata.altlinux.org/ALT-PU-2024-16208",
+            "Source": "ALTPU"
+          },
+          {
+            "RefID": "BDU:2024-07075",
+            "RefURL": "https://bdu.fstec.ru/vul/2024-07075",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "CVE-2024-39705",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-39705",
+            "Source": "CVE"
+          }
+        ],
+        "Description": "This update upgrades python3-module-nltk to version 3.9.1-alt2.c10f1.1. \nSecurity Fix(es):\n\n * BDU:2024-07075: Уязвимость функции nltk.download() пакета библиотек для символьной и статистической обработки естественного языка NLTK, позволяющая нарушителю выполнить произвольный код\n\n * CVE-2024-39705: NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averaged_perceptron_tagger and punkt.\n\n * #51985: Resource wordnet not found",
+        "Advisory": {
+          "From": "errata.altlinux.org",
+          "Severity": "Critical",
+          "Rights": "Copyright 2024 BaseALT Ltd.",
+          "Issued": {
+            "Date": "2024-11-28"
+          },
+          "Updated": {
+            "Date": "2024-11-28"
+          },
+          "BDUs": [
+            {
+              "ID": "BDU:2024-07075",
+              "CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
+              "CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+              "CWE": "CWE-300, CWE-502",
+              "Href": "https://bdu.fstec.ru/vul/2024-07075",
+              "Impact": "Critical",
+              "Public": "20240519"
+            }
+          ],
+          "CVEs": [
+            {
+              "ID": "CVE-2024-39705",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-39705",
+              "Impact": "None",
+              "Public": "20240627"
+            }
+          ],
+          "Bugzilla": [
+            {
+              "ID": "51985",
+              "Href": "https://bugzilla.altlinux.org/51985",
+              "Data": "Resource wordnet not found"
+            }
+          ],
+          "AffectedCPEs": {
+            "CPEs": [
+              "cpe:/o:alt:spworkstation:10",
+              "cpe:/o:alt:spserver:10"
+            ]
+          }
+        }
+      },
+      "Criteria": {
+        "Operator": "AND",
+        "Criterions": [
+          {
+            "TestRef": "oval:org.altlinux.errata:tst:4001",
+            "Comment": "ALT Linux must be installed"
+          }
+        ],
+        "Criterias": [
+          {
+            "Operator": "OR",
+            "Criterions": [
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416208001",
+                "Comment": "python3-module-nltk is earlier than 0:3.9.1-alt2.c10f1.1"
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-16208/objects.json
+++ b/oval/c10f1/ALT-PU-2024-16208/objects.json
@ -0,0 +1,34 @@
+{
+  "TextFileContent54Objects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:4001",
+      "Version": "1",
+      "Comment": "Evaluate `/etc/os-release` file content",
+      "Path": {
+        "Datatype": "string",
+        "Text": "/etc"
+      },
+      "Filepath": {
+        "Datatype": "string",
+        "Text": "os-release"
+      },
+      "Pattern": {
+        "Datatype": "string",
+        "Operation": "pattern match",
+        "Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
+      },
+      "Instance": {
+        "Datatype": "int",
+        "Text": "1"
+      }
+    }
+  ],
+  "RPMInfoObjects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416208001",
+      "Version": "1",
+      "Comment": "python3-module-nltk is installed",
+      "Name": "python3-module-nltk"
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-16208/states.json
+++ b/oval/c10f1/ALT-PU-2024-16208/states.json
@ -0,0 +1,23 @@
+{
+  "TextFileContent54State": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:4001",
+      "Version": "1",
+      "Text": {}
+    }
+  ],
+  "RPMInfoStates": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:202416208001",
+      "Version": "1",
+      "Comment": "package EVR is earlier than 0:3.9.1-alt2.c10f1.1",
+      "Arch": {},
+      "EVR": {
+        "Text": "0:3.9.1-alt2.c10f1.1",
+        "Datatype": "evr_string",
+        "Operation": "less than"
+      },
+      "Subexpression": {}
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-16208/tests.json
+++ b/oval/c10f1/ALT-PU-2024-16208/tests.json
@ -0,0 +1,30 @@
+{
+  "TextFileContent54Tests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:4001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ALT Linux based on branch 'c10f1' must be installed",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:4001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:4001"
+      }
+    }
+  ],
+  "RPMInfoTests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416208001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "python3-module-nltk is earlier than 0:3.9.1-alt2.c10f1.1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416208001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416208001"
+      }
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-16232/definitions.json
+++ b/oval/c10f1/ALT-PU-2024-16232/definitions.json
@ -0,0 +1,105 @@
+{
+  "Definition": [
+    {
+      "ID": "oval:org.altlinux.errata:def:202416232",
+      "Version": "oval:org.altlinux.errata:def:202416232",
+      "Class": "patch",
+      "Metadata": {
+        "Title": "ALT-PU-2024-16232: package `python3-module-gunicorn` update to version 23.0.0-alt0.p10.1",
+        "AffectedList": [
+          {
+            "Family": "unix",
+            "Platforms": [
+              "ALT Linux branch c10f1"
+            ],
+            "Products": [
+              "ALT SP Workstation",
+              "ALT SP Server"
+            ]
+          }
+        ],
+        "References": [
+          {
+            "RefID": "ALT-PU-2024-16232",
+            "RefURL": "https://errata.altlinux.org/ALT-PU-2024-16232",
+            "Source": "ALTPU"
+          },
+          {
+            "RefID": "BDU:2024-03553",
+            "RefURL": "https://bdu.fstec.ru/vul/2024-03553",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "CVE-2024-1135",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-1135",
+            "Source": "CVE"
+          }
+        ],
+        "Description": "This update upgrades python3-module-gunicorn to version 23.0.0-alt0.p10.1. \nSecurity Fix(es):\n\n * BDU:2024-03553: Уязвимость WSGI-сервера gunicorn, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить атаку «контрабанда HTTP-запросов»\n\n * CVE-2024-1135: Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.\n\n * #52085: Для закрытия CVE-2024-1135 необходимо обновить пакет",
+        "Advisory": {
+          "From": "errata.altlinux.org",
+          "Severity": "High",
+          "Rights": "Copyright 2024 BaseALT Ltd.",
+          "Issued": {
+            "Date": "2024-11-28"
+          },
+          "Updated": {
+            "Date": "2024-11-28"
+          },
+          "BDUs": [
+            {
+              "ID": "BDU:2024-03553",
+              "CVSS": "AV:N/AC:L/Au:N/C:N/I:C/A:N",
+              "CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+              "CWE": "CWE-444",
+              "Href": "https://bdu.fstec.ru/vul/2024-03553",
+              "Impact": "High",
+              "Public": "20231219"
+            }
+          ],
+          "CVEs": [
+            {
+              "ID": "CVE-2024-1135",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-1135",
+              "Impact": "None",
+              "Public": "20240416"
+            }
+          ],
+          "Bugzilla": [
+            {
+              "ID": "52085",
+              "Href": "https://bugzilla.altlinux.org/52085",
+              "Data": "Для закрытия CVE-2024-1135 необходимо обновить пакет"
+            }
+          ],
+          "AffectedCPEs": {
+            "CPEs": [
+              "cpe:/o:alt:spworkstation:10",
+              "cpe:/o:alt:spserver:10"
+            ]
+          }
+        }
+      },
+      "Criteria": {
+        "Operator": "AND",
+        "Criterions": [
+          {
+            "TestRef": "oval:org.altlinux.errata:tst:4001",
+            "Comment": "ALT Linux must be installed"
+          }
+        ],
+        "Criterias": [
+          {
+            "Operator": "OR",
+            "Criterions": [
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416232001",
+                "Comment": "python3-module-gunicorn is earlier than 0:23.0.0-alt0.p10.1"
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-16232/objects.json
+++ b/oval/c10f1/ALT-PU-2024-16232/objects.json
@ -0,0 +1,34 @@
+{
+  "TextFileContent54Objects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:4001",
+      "Version": "1",
+      "Comment": "Evaluate `/etc/os-release` file content",
+      "Path": {
+        "Datatype": "string",
+        "Text": "/etc"
+      },
+      "Filepath": {
+        "Datatype": "string",
+        "Text": "os-release"
+      },
+      "Pattern": {
+        "Datatype": "string",
+        "Operation": "pattern match",
+        "Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
+      },
+      "Instance": {
+        "Datatype": "int",
+        "Text": "1"
+      }
+    }
+  ],
+  "RPMInfoObjects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416232001",
+      "Version": "1",
+      "Comment": "python3-module-gunicorn is installed",
+      "Name": "python3-module-gunicorn"
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-16232/states.json
+++ b/oval/c10f1/ALT-PU-2024-16232/states.json
@ -0,0 +1,23 @@
+{
+  "TextFileContent54State": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:4001",
+      "Version": "1",
+      "Text": {}
+    }
+  ],
+  "RPMInfoStates": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:202416232001",
+      "Version": "1",
+      "Comment": "package EVR is earlier than 0:23.0.0-alt0.p10.1",
+      "Arch": {},
+      "EVR": {
+        "Text": "0:23.0.0-alt0.p10.1",
+        "Datatype": "evr_string",
+        "Operation": "less than"
+      },
+      "Subexpression": {}
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-16232/tests.json
+++ b/oval/c10f1/ALT-PU-2024-16232/tests.json
@ -0,0 +1,30 @@
+{
+  "TextFileContent54Tests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:4001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ALT Linux based on branch 'c10f1' must be installed",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:4001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:4001"
+      }
+    }
+  ],
+  "RPMInfoTests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416232001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "python3-module-gunicorn is earlier than 0:23.0.0-alt0.p10.1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416232001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416232001"
+      }
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14138/definitions.json
+++ b/oval/p10/ALT-PU-2024-14138/definitions.json
@ -0,0 +1,116 @@
+{
+  "Definition": [
+    {
+      "ID": "oval:org.altlinux.errata:def:202414138",
+      "Version": "oval:org.altlinux.errata:def:202414138",
+      "Class": "patch",
+      "Metadata": {
+        "Title": "ALT-PU-2024-14138: package `gpupdate` update to version 0.11.4-alt1",
+        "AffectedList": [
+          {
+            "Family": "unix",
+            "Platforms": [
+              "ALT Linux branch p10"
+            ],
+            "Products": [
+              "ALT Server",
+              "ALT Virtualization Server",
+              "ALT Workstation",
+              "ALT Workstation K",
+              "ALT Education",
+              "Simply Linux",
+              "Starterkit"
+            ]
+          }
+        ],
+        "References": [
+          {
+            "RefID": "ALT-PU-2024-14138",
+            "RefURL": "https://errata.altlinux.org/ALT-PU-2024-14138",
+            "Source": "ALTPU"
+          }
+        ],
+        "Description": "This update upgrades gpupdate to version 0.11.4-alt1. \nSecurity Fix(es):\n\n * #51201: Не правильная обработка сочетания \"\\U\"\n\n * #51275: Перестали работать ярлыки, которые формируются через ГП\n\n * #51606: Картинка фона рабочего стола: не копирует картинку с sysvol для MATE\n\n * #51631: excessive dependency on python3(plugin)",
+        "Advisory": {
+          "From": "errata.altlinux.org",
+          "Severity": "Low",
+          "Rights": "Copyright 2024 BaseALT Ltd.",
+          "Issued": {
+            "Date": "2024-11-28"
+          },
+          "Updated": {
+            "Date": "2024-11-28"
+          },
+          "BDUs": null,
+          "Bugzilla": [
+            {
+              "ID": "51201",
+              "Href": "https://bugzilla.altlinux.org/51201",
+              "Data": "Не правильная обработка сочетания \"\\U\""
+            },
+            {
+              "ID": "51275",
+              "Href": "https://bugzilla.altlinux.org/51275",
+              "Data": "Перестали работать ярлыки, которые формируются через ГП"
+            },
+            {
+              "ID": "51606",
+              "Href": "https://bugzilla.altlinux.org/51606",
+              "Data": "Картинка фона рабочего стола: не копирует картинку с sysvol для MATE"
+            },
+            {
+              "ID": "51631",
+              "Href": "https://bugzilla.altlinux.org/51631",
+              "Data": "excessive dependency on python3(plugin)"
+            }
+          ],
+          "AffectedCPEs": {
+            "CPEs": [
+              "cpe:/o:alt:kworkstation:10",
+              "cpe:/o:alt:workstation:10",
+              "cpe:/o:alt:server:10",
+              "cpe:/o:alt:server-v:10",
+              "cpe:/o:alt:education:10",
+              "cpe:/o:alt:slinux:10",
+              "cpe:/o:alt:starterkit:p10",
+              "cpe:/o:alt:kworkstation:10.1",
+              "cpe:/o:alt:workstation:10.1",
+              "cpe:/o:alt:server:10.1",
+              "cpe:/o:alt:server-v:10.1",
+              "cpe:/o:alt:education:10.1",
+              "cpe:/o:alt:slinux:10.1",
+              "cpe:/o:alt:starterkit:10.1",
+              "cpe:/o:alt:kworkstation:10.2",
+              "cpe:/o:alt:workstation:10.2",
+              "cpe:/o:alt:server:10.2",
+              "cpe:/o:alt:server-v:10.2",
+              "cpe:/o:alt:education:10.2",
+              "cpe:/o:alt:slinux:10.2",
+              "cpe:/o:alt:starterkit:10.2"
+            ]
+          }
+        }
+      },
+      "Criteria": {
+        "Operator": "AND",
+        "Criterions": [
+          {
+            "TestRef": "oval:org.altlinux.errata:tst:2001",
+            "Comment": "ALT Linux must be installed"
+          }
+        ],
+        "Criterias": [
+          {
+            "Operator": "OR",
+            "Criterions": [
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202414138001",
+                "Comment": "gpupdate is earlier than 0:0.11.4-alt1"
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14138/objects.json
+++ b/oval/p10/ALT-PU-2024-14138/objects.json
@ -0,0 +1,34 @@
+{
+  "TextFileContent54Objects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:2001",
+      "Version": "1",
+      "Comment": "Evaluate `/etc/os-release` file content",
+      "Path": {
+        "Datatype": "string",
+        "Text": "/etc"
+      },
+      "Filepath": {
+        "Datatype": "string",
+        "Text": "os-release"
+      },
+      "Pattern": {
+        "Datatype": "string",
+        "Operation": "pattern match",
+        "Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
+      },
+      "Instance": {
+        "Datatype": "int",
+        "Text": "1"
+      }
+    }
+  ],
+  "RPMInfoObjects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:202414138001",
+      "Version": "1",
+      "Comment": "gpupdate is installed",
+      "Name": "gpupdate"
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14138/states.json
+++ b/oval/p10/ALT-PU-2024-14138/states.json
@ -0,0 +1,23 @@
+{
+  "TextFileContent54State": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:2001",
+      "Version": "1",
+      "Text": {}
+    }
+  ],
+  "RPMInfoStates": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:202414138001",
+      "Version": "1",
+      "Comment": "package EVR is earlier than 0:0.11.4-alt1",
+      "Arch": {},
+      "EVR": {
+        "Text": "0:0.11.4-alt1",
+        "Datatype": "evr_string",
+        "Operation": "less than"
+      },
+      "Subexpression": {}
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14138/tests.json
+++ b/oval/p10/ALT-PU-2024-14138/tests.json
@ -0,0 +1,30 @@
+{
+  "TextFileContent54Tests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:2001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ALT Linux based on branch 'p10' must be installed",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:2001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:2001"
+      }
+    }
+  ],
+  "RPMInfoTests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:202414138001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "gpupdate is earlier than 0:0.11.4-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202414138001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202414138001"
+      }
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14140/definitions.json
+++ b/oval/p10/ALT-PU-2024-14140/definitions.json
@ -0,0 +1,166 @@
+{
+  "Definition": [
+    {
+      "ID": "oval:org.altlinux.errata:def:202414140",
+      "Version": "oval:org.altlinux.errata:def:202414140",
+      "Class": "patch",
+      "Metadata": {
+        "Title": "ALT-PU-2024-14140: package `gpui` update to version 0.2.55-alt1",
+        "AffectedList": [
+          {
+            "Family": "unix",
+            "Platforms": [
+              "ALT Linux branch p10"
+            ],
+            "Products": [
+              "ALT Server",
+              "ALT Virtualization Server",
+              "ALT Workstation",
+              "ALT Workstation K",
+              "ALT Education",
+              "Simply Linux",
+              "Starterkit"
+            ]
+          }
+        ],
+        "References": [
+          {
+            "RefID": "ALT-PU-2024-14140",
+            "RefURL": "https://errata.altlinux.org/ALT-PU-2024-14140",
+            "Source": "ALTPU"
+          }
+        ],
+        "Description": "This update upgrades gpui to version 0.2.55-alt1. \nSecurity Fix(es):\n\n * #44507: Странно отображаются параметры настройки firefox (admx-firefox)\n\n * #47576: Неправильно сохраняет / отображает значение комментария\n\n * #47727: Управление файлами - кнопка выбора файла, очистка поля\n\n * #47742: Неправильно работают опции политики \"Служба поиска файлов\"\n\n * #48970: Служба поиска файлов: неверно задаётся параметр Включить индексацию содержимого файлов\n\n * #49053: Групповая политика для Mozilla - Firefox - Домашняя страница: название поля URL отображается под полем для ввода\n\n * #49098: FR | Добавить пункт Изменить в контекстное меню предпочтений\n\n * #49099: Одинаковое описание в окне настройки скриптов\n\n * #50123: Некорректно сохраняется список URL в политике Яндекс.Браузера для клиентов windows\n\n * #50706: Квадратные скобки в редактируемых полях приводят к сбросу всех произведенных настроек во всей политике.\n\n * #51451: GPT.INI поле Version не соответствует версии политики\n\n * #51466: Windows-клиент не обрабатывает GPT.INI, сформированный GPUI (лишние символы при отображении заголовка DisplayName / в окне настройки скриптов)\n\n * #51587: Не работает политики Установка политиков / Удаление пакетов\n\n * #51681: Не выводит значения списков",
+        "Advisory": {
+          "From": "errata.altlinux.org",
+          "Severity": "Low",
+          "Rights": "Copyright 2024 BaseALT Ltd.",
+          "Issued": {
+            "Date": "2024-11-28"
+          },
+          "Updated": {
+            "Date": "2024-11-28"
+          },
+          "BDUs": null,
+          "Bugzilla": [
+            {
+              "ID": "44507",
+              "Href": "https://bugzilla.altlinux.org/44507",
+              "Data": "Странно отображаются параметры настройки firefox (admx-firefox)"
+            },
+            {
+              "ID": "47576",
+              "Href": "https://bugzilla.altlinux.org/47576",
+              "Data": "Неправильно сохраняет / отображает значение комментария"
+            },
+            {
+              "ID": "47727",
+              "Href": "https://bugzilla.altlinux.org/47727",
+              "Data": "Управление файлами - кнопка выбора файла, очистка поля"
+            },
+            {
+              "ID": "47742",
+              "Href": "https://bugzilla.altlinux.org/47742",
+              "Data": "Неправильно работают опции политики \"Служба поиска файлов\""
+            },
+            {
+              "ID": "48970",
+              "Href": "https://bugzilla.altlinux.org/48970",
+              "Data": "Служба поиска файлов: неверно задаётся параметр Включить индексацию содержимого файлов"
+            },
+            {
+              "ID": "49053",
+              "Href": "https://bugzilla.altlinux.org/49053",
+              "Data": "Групповая политика для Mozilla - Firefox - Домашняя страница: название поля URL отображается под полем для ввода"
+            },
+            {
+              "ID": "49098",
+              "Href": "https://bugzilla.altlinux.org/49098",
+              "Data": "FR | Добавить пункт Изменить в контекстное меню предпочтений"
+            },
+            {
+              "ID": "49099",
+              "Href": "https://bugzilla.altlinux.org/49099",
+              "Data": "Одинаковое описание в окне настройки скриптов"
+            },
+            {
+              "ID": "50123",
+              "Href": "https://bugzilla.altlinux.org/50123",
+              "Data": "Некорректно сохраняется список URL в политике Яндекс.Браузера для клиентов windows"
+            },
+            {
+              "ID": "50706",
+              "Href": "https://bugzilla.altlinux.org/50706",
+              "Data": "Квадратные скобки в редактируемых полях приводят к сбросу всех произведенных настроек во всей политике."
+            },
+            {
+              "ID": "51451",
+              "Href": "https://bugzilla.altlinux.org/51451",
+              "Data": "GPT.INI поле Version не соответствует версии политики"
+            },
+            {
+              "ID": "51466",
+              "Href": "https://bugzilla.altlinux.org/51466",
+              "Data": "Windows-клиент не обрабатывает GPT.INI, сформированный GPUI (лишние символы при отображении заголовка DisplayName / в окне настройки скриптов)"
+            },
+            {
+              "ID": "51587",
+              "Href": "https://bugzilla.altlinux.org/51587",
+              "Data": "Не работает политики Установка политиков / Удаление пакетов"
+            },
+            {
+              "ID": "51681",
+              "Href": "https://bugzilla.altlinux.org/51681",
+              "Data": "Не выводит значения списков"
+            }
+          ],
+          "AffectedCPEs": {
+            "CPEs": [
+              "cpe:/o:alt:kworkstation:10",
+              "cpe:/o:alt:workstation:10",
+              "cpe:/o:alt:server:10",
+              "cpe:/o:alt:server-v:10",
+              "cpe:/o:alt:education:10",
+              "cpe:/o:alt:slinux:10",
+              "cpe:/o:alt:starterkit:p10",
+              "cpe:/o:alt:kworkstation:10.1",
+              "cpe:/o:alt:workstation:10.1",
+              "cpe:/o:alt:server:10.1",
+              "cpe:/o:alt:server-v:10.1",
+              "cpe:/o:alt:education:10.1",
+              "cpe:/o:alt:slinux:10.1",
+              "cpe:/o:alt:starterkit:10.1",
+              "cpe:/o:alt:kworkstation:10.2",
+              "cpe:/o:alt:workstation:10.2",
+              "cpe:/o:alt:server:10.2",
+              "cpe:/o:alt:server-v:10.2",
+              "cpe:/o:alt:education:10.2",
+              "cpe:/o:alt:slinux:10.2",
+              "cpe:/o:alt:starterkit:10.2"
+            ]
+          }
+        }
+      },
+      "Criteria": {
+        "Operator": "AND",
+        "Criterions": [
+          {
+            "TestRef": "oval:org.altlinux.errata:tst:2001",
+            "Comment": "ALT Linux must be installed"
+          }
+        ],
+        "Criterias": [
+          {
+            "Operator": "OR",
+            "Criterions": [
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202414140001",
+                "Comment": "gpui is earlier than 0:0.2.55-alt1"
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14140/objects.json
+++ b/oval/p10/ALT-PU-2024-14140/objects.json
@ -0,0 +1,34 @@
+{
+  "TextFileContent54Objects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:2001",
+      "Version": "1",
+      "Comment": "Evaluate `/etc/os-release` file content",
+      "Path": {
+        "Datatype": "string",
+        "Text": "/etc"
+      },
+      "Filepath": {
+        "Datatype": "string",
+        "Text": "os-release"
+      },
+      "Pattern": {
+        "Datatype": "string",
+        "Operation": "pattern match",
+        "Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
+      },
+      "Instance": {
+        "Datatype": "int",
+        "Text": "1"
+      }
+    }
+  ],
+  "RPMInfoObjects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:202414140001",
+      "Version": "1",
+      "Comment": "gpui is installed",
+      "Name": "gpui"
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14140/states.json
+++ b/oval/p10/ALT-PU-2024-14140/states.json
@ -0,0 +1,23 @@
+{
+  "TextFileContent54State": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:2001",
+      "Version": "1",
+      "Text": {}
+    }
+  ],
+  "RPMInfoStates": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:202414140001",
+      "Version": "1",
+      "Comment": "package EVR is earlier than 0:0.2.55-alt1",
+      "Arch": {},
+      "EVR": {
+        "Text": "0:0.2.55-alt1",
+        "Datatype": "evr_string",
+        "Operation": "less than"
+      },
+      "Subexpression": {}
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-14140/tests.json
+++ b/oval/p10/ALT-PU-2024-14140/tests.json
@ -0,0 +1,30 @@
+{
+  "TextFileContent54Tests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:2001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ALT Linux based on branch 'p10' must be installed",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:2001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:2001"
+      }
+    }
+  ],
+  "RPMInfoTests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:202414140001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "gpui is earlier than 0:0.2.55-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202414140001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202414140001"
+      }
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-16188/definitions.json
+++ b/oval/p10/ALT-PU-2024-16188/definitions.json
@ -0,0 +1,260 @@
+{
+  "Definition": [
+    {
+      "ID": "oval:org.altlinux.errata:def:202416188",
+      "Version": "oval:org.altlinux.errata:def:202416188",
+      "Class": "patch",
+      "Metadata": {
+        "Title": "ALT-PU-2024-16188: package `ntp` update to version 4.2.8p18-alt1",
+        "AffectedList": [
+          {
+            "Family": "unix",
+            "Platforms": [
+              "ALT Linux branch p10"
+            ],
+            "Products": [
+              "ALT Server",
+              "ALT Virtualization Server",
+              "ALT Workstation",
+              "ALT Workstation K",
+              "ALT Education",
+              "Simply Linux",
+              "Starterkit"
+            ]
+          }
+        ],
+        "References": [
+          {
+            "RefID": "ALT-PU-2024-16188",
+            "RefURL": "https://errata.altlinux.org/ALT-PU-2024-16188",
+            "Source": "ALTPU"
+          },
+          {
+            "RefID": "BDU:2023-02337",
+            "RefURL": "https://bdu.fstec.ru/vul/2023-02337",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "BDU:2023-02364",
+            "RefURL": "https://bdu.fstec.ru/vul/2023-02364",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "BDU:2023-02658",
+            "RefURL": "https://bdu.fstec.ru/vul/2023-02658",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "BDU:2023-02659",
+            "RefURL": "https://bdu.fstec.ru/vul/2023-02659",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "BDU:2023-02660",
+            "RefURL": "https://bdu.fstec.ru/vul/2023-02660",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "CVE-2023-26551",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-26551",
+            "Source": "CVE"
+          },
+          {
+            "RefID": "CVE-2023-26552",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-26552",
+            "Source": "CVE"
+          },
+          {
+            "RefID": "CVE-2023-26553",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-26553",
+            "Source": "CVE"
+          },
+          {
+            "RefID": "CVE-2023-26554",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-26554",
+            "Source": "CVE"
+          },
+          {
+            "RefID": "CVE-2023-26555",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-26555",
+            "Source": "CVE"
+          }
+        ],
+        "Description": "This update upgrades ntp to version 4.2.8p18-alt1. \nSecurity Fix(es):\n\n * BDU:2023-02337: Уязвимость функции mstolfp() (libntp/mstolfp.c) программы мониторинга операций ntpq реализации протокола синхронизации времени NTP, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2023-02364: Уязвимость функции mstolfp() (libntp/mstolfp.c) программы мониторинга операций ntpq реализации протокола синхронизации времени NTP, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2023-02658: Уязвимость функции mstolfp() (libntp/mstolfp.c) программы мониторинга операций ntpq реализации протокола синхронизации времени NTP, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2023-02659: Уязвимость функции mstolfp() (libntp/mstolfp.c) программы мониторинга операций ntpq реализации протокола синхронизации времени NTP, позволяющая нарушителю выполнить произвольный код\n\n * BDU:2023-02660: Уязвимость функции praecis_parse (ntpd/refclock_palisade.c) демона ntpd реализации протокола синхронизации времени NTP, позволяющая нарушителю вызвать отказ в обслуживании\n\n * CVE-2023-26551: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp\u003ccpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.\n\n * CVE-2023-26552: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.\n\n * CVE-2023-26553: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.\n\n * CVE-2023-26554: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.\n\n * CVE-2023-26555: praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.",
+        "Advisory": {
+          "From": "errata.altlinux.org",
+          "Severity": "Low",
+          "Rights": "Copyright 2024 BaseALT Ltd.",
+          "Issued": {
+            "Date": "2024-11-28"
+          },
+          "Updated": {
+            "Date": "2024-11-28"
+          },
+          "BDUs": [
+            {
+              "ID": "BDU:2023-02337",
+              "CVSS": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
+              "CVSS3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://bdu.fstec.ru/vul/2023-02337",
+              "Impact": "Low",
+              "Public": "20230412"
+            },
+            {
+              "ID": "BDU:2023-02364",
+              "CVSS": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
+              "CVSS3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://bdu.fstec.ru/vul/2023-02364",
+              "Impact": "Low",
+              "Public": "20230412"
+            },
+            {
+              "ID": "BDU:2023-02658",
+              "CVSS": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
+              "CVSS3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://bdu.fstec.ru/vul/2023-02658",
+              "Impact": "Low",
+              "Public": "20230412"
+            },
+            {
+              "ID": "BDU:2023-02659",
+              "CVSS": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
+              "CVSS3": "AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://bdu.fstec.ru/vul/2023-02659",
+              "Impact": "Low",
+              "Public": "20230412"
+            },
+            {
+              "ID": "BDU:2023-02660",
+              "CVSS": "AV:A/AC:H/Au:N/C:N/I:N/A:P",
+              "CVSS3": "AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://bdu.fstec.ru/vul/2023-02660",
+              "Impact": "Low",
+              "Public": "20230412"
+            }
+          ],
+          "CVEs": [
+            {
+              "ID": "CVE-2023-26551",
+              "CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-26551",
+              "Impact": "Low",
+              "Public": "20230411"
+            },
+            {
+              "ID": "CVE-2023-26552",
+              "CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-26552",
+              "Impact": "Low",
+              "Public": "20230411"
+            },
+            {
+              "ID": "CVE-2023-26553",
+              "CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-26553",
+              "Impact": "Low",
+              "Public": "20230411"
+            },
+            {
+              "ID": "CVE-2023-26554",
+              "CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+              "CWE": "CWE-787",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-26554",
+              "Impact": "Low",
+              "Public": "20230411"
+            },
+            {
+              "ID": "CVE-2023-26555",
+              "CVSS3": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+              "CWE": "CWE-787",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-26555",
+              "Impact": "Low",
+              "Public": "20230411"
+            }
+          ],
+          "AffectedCPEs": {
+            "CPEs": [
+              "cpe:/o:alt:kworkstation:10",
+              "cpe:/o:alt:workstation:10",
+              "cpe:/o:alt:server:10",
+              "cpe:/o:alt:server-v:10",
+              "cpe:/o:alt:education:10",
+              "cpe:/o:alt:slinux:10",
+              "cpe:/o:alt:starterkit:p10",
+              "cpe:/o:alt:kworkstation:10.1",
+              "cpe:/o:alt:workstation:10.1",
+              "cpe:/o:alt:server:10.1",
+              "cpe:/o:alt:server-v:10.1",
+              "cpe:/o:alt:education:10.1",
+              "cpe:/o:alt:slinux:10.1",
+              "cpe:/o:alt:starterkit:10.1",
+              "cpe:/o:alt:kworkstation:10.2",
+              "cpe:/o:alt:workstation:10.2",
+              "cpe:/o:alt:server:10.2",
+              "cpe:/o:alt:server-v:10.2",
+              "cpe:/o:alt:education:10.2",
+              "cpe:/o:alt:slinux:10.2",
+              "cpe:/o:alt:starterkit:10.2"
+            ]
+          }
+        }
+      },
+      "Criteria": {
+        "Operator": "AND",
+        "Criterions": [
+          {
+            "TestRef": "oval:org.altlinux.errata:tst:2001",
+            "Comment": "ALT Linux must be installed"
+          }
+        ],
+        "Criterias": [
+          {
+            "Operator": "OR",
+            "Criterions": [
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188001",
+                "Comment": "ntp is earlier than 0:4.2.8p18-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188002",
+                "Comment": "ntp-aux is earlier than 0:4.2.8p18-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188003",
+                "Comment": "ntp-doc is earlier than 0:4.2.8p18-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188004",
+                "Comment": "ntp-utils is earlier than 0:4.2.8p18-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188005",
+                "Comment": "ntpd is earlier than 0:4.2.8p18-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188006",
+                "Comment": "ntpdate is earlier than 0:4.2.8p18-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188007",
+                "Comment": "ntpq is earlier than 0:4.2.8p18-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202416188008",
+                "Comment": "perl-NTP-Util is earlier than 0:4.2.8p18-alt1"
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-16188/objects.json
+++ b/oval/p10/ALT-PU-2024-16188/objects.json
@ -0,0 +1,76 @@
+{
+  "TextFileContent54Objects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:2001",
+      "Version": "1",
+      "Comment": "Evaluate `/etc/os-release` file content",
+      "Path": {
+        "Datatype": "string",
+        "Text": "/etc"
+      },
+      "Filepath": {
+        "Datatype": "string",
+        "Text": "os-release"
+      },
+      "Pattern": {
+        "Datatype": "string",
+        "Operation": "pattern match",
+        "Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
+      },
+      "Instance": {
+        "Datatype": "int",
+        "Text": "1"
+      }
+    }
+  ],
+  "RPMInfoObjects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188001",
+      "Version": "1",
+      "Comment": "ntp is installed",
+      "Name": "ntp"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188002",
+      "Version": "1",
+      "Comment": "ntp-aux is installed",
+      "Name": "ntp-aux"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188003",
+      "Version": "1",
+      "Comment": "ntp-doc is installed",
+      "Name": "ntp-doc"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188004",
+      "Version": "1",
+      "Comment": "ntp-utils is installed",
+      "Name": "ntp-utils"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188005",
+      "Version": "1",
+      "Comment": "ntpd is installed",
+      "Name": "ntpd"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188006",
+      "Version": "1",
+      "Comment": "ntpdate is installed",
+      "Name": "ntpdate"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188007",
+      "Version": "1",
+      "Comment": "ntpq is installed",
+      "Name": "ntpq"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202416188008",
+      "Version": "1",
+      "Comment": "perl-NTP-Util is installed",
+      "Name": "perl-NTP-Util"
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-16188/states.json
+++ b/oval/p10/ALT-PU-2024-16188/states.json
@ -0,0 +1,23 @@
+{
+  "TextFileContent54State": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:2001",
+      "Version": "1",
+      "Text": {}
+    }
+  ],
+  "RPMInfoStates": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:202416188001",
+      "Version": "1",
+      "Comment": "package EVR is earlier than 0:4.2.8p18-alt1",
+      "Arch": {},
+      "EVR": {
+        "Text": "0:4.2.8p18-alt1",
+        "Datatype": "evr_string",
+        "Operation": "less than"
+      },
+      "Subexpression": {}
+    }
+  ]
+}
--- a/oval/p10/ALT-PU-2024-16188/tests.json
+++ b/oval/p10/ALT-PU-2024-16188/tests.json
@ -0,0 +1,114 @@
+{
+  "TextFileContent54Tests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:2001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ALT Linux based on branch 'p10' must be installed",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:2001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:2001"
+      }
+    }
+  ],
+  "RPMInfoTests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ntp is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188002",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ntp-aux is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188002"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188003",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ntp-doc is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188003"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188004",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ntp-utils is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188004"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188005",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ntpd is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188005"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188006",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ntpdate is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188006"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188007",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ntpq is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188007"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202416188008",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "perl-NTP-Util is earlier than 0:4.2.8p18-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202416188008"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202416188001"
+      }
+    }
+  ]
+}