pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2024-03-29 21:02:08 +00:00
parent f653c34c10
commit 5ada802c8f
20 changed files with 2609 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

212
oval/c10f2/ALT-PU-2024-4522/definitions.json Normal file
View File

@ -0,0 +1,212 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244522",
"Version": "oval:org.altlinux.errata:def:20244522",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4522: package `systemd` update to version 249.17-alt2",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f2"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4522",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4522",
"Source": "ALTPU"
},
{
"RefID": "BDU:2024-00853",
"RefURL": "https://bdu.fstec.ru/vul/2024-00853",
"Source": "BDU"
},
{
"RefID": "CVE-2023-7008",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-7008",
"Source": "CVE"
}
],
"Description": "This update upgrades systemd to version 249.17-alt2. \nSecurity Fix(es):\n\n * BDU:2024-00853: Уязвимость службы управления сетевыми соединениями и разрешениями доменных имён (DNS) systemd-resolved, связанная с доступом к каналу из точки, не являющейся конечной, позволяющая нарушителю изменить записи DNS, защищенные DNSSEC\n\n * CVE-2023-7008: A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-29"
},
"Updated": {
"Date": "2024-03-29"
},
"bdu": [
{
"Cvss": "AV:N/AC:H/Au:N/C:N/I:C/A:N",
"Cvss3": "AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"Cwe": "CWE-300",
"Href": "https://bdu.fstec.ru/vul/2024-00853",
"Impact": "Low",
"Public": "20231223",
"CveID": "BDU:2024-00853"
}
],
"Cves": [
{
"Cvss3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"Cwe": "NVD-CWE-Other",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-7008",
"Impact": "Low",
"Public": "20231223",
"CveID": "CVE-2023-7008"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244522001",
"Comment": "libnss-myhostname is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522002",
"Comment": "libnss-mymachines is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522003",
"Comment": "libnss-resolve is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522004",
"Comment": "libnss-systemd is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522005",
"Comment": "libsystemd is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522006",
"Comment": "libsystemd-devel is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522007",
"Comment": "libudev-devel is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522008",
"Comment": "libudev1 is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522009",
"Comment": "pam_systemd is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522010",
"Comment": "pam_systemd_home is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522011",
"Comment": "systemd is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522012",
"Comment": "systemd-analyze is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522013",
"Comment": "systemd-boot-efi is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522014",
"Comment": "systemd-container is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522015",
"Comment": "systemd-coredump is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522016",
"Comment": "systemd-homed is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522017",
"Comment": "systemd-journal-remote is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522018",
"Comment": "systemd-modules-common is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522019",
"Comment": "systemd-networkd is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522020",
"Comment": "systemd-oomd-defaults is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522021",
"Comment": "systemd-portable is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522022",
"Comment": "systemd-stateless is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522023",
"Comment": "systemd-sysctl-common is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522024",
"Comment": "systemd-sysvinit is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522025",
"Comment": "systemd-tests is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522026",
"Comment": "systemd-timesyncd is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522027",
"Comment": "systemd-tmpfiles-common is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522028",
"Comment": "systemd-utils-filetriggers is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522029",
"Comment": "systemd-utils-standalone is earlier than 1:249.17-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244522030",
"Comment": "udev is earlier than 1:249.17-alt2"
}
]
}
]
}
}
]
}

208
oval/c10f2/ALT-PU-2024-4522/objects.json Normal file
View File

@ -0,0 +1,208 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244522001",
"Version": "1",
"comment": "libnss-myhostname is installed",
"Name": "libnss-myhostname"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522002",
"Version": "1",
"comment": "libnss-mymachines is installed",
"Name": "libnss-mymachines"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522003",
"Version": "1",
"comment": "libnss-resolve is installed",
"Name": "libnss-resolve"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522004",
"Version": "1",
"comment": "libnss-systemd is installed",
"Name": "libnss-systemd"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522005",
"Version": "1",
"comment": "libsystemd is installed",
"Name": "libsystemd"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522006",
"Version": "1",
"comment": "libsystemd-devel is installed",
"Name": "libsystemd-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522007",
"Version": "1",
"comment": "libudev-devel is installed",
"Name": "libudev-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522008",
"Version": "1",
"comment": "libudev1 is installed",
"Name": "libudev1"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522009",
"Version": "1",
"comment": "pam_systemd is installed",
"Name": "pam_systemd"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522010",
"Version": "1",
"comment": "pam_systemd_home is installed",
"Name": "pam_systemd_home"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522011",
"Version": "1",
"comment": "systemd is installed",
"Name": "systemd"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522012",
"Version": "1",
"comment": "systemd-analyze is installed",
"Name": "systemd-analyze"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522013",
"Version": "1",
"comment": "systemd-boot-efi is installed",
"Name": "systemd-boot-efi"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522014",
"Version": "1",
"comment": "systemd-container is installed",
"Name": "systemd-container"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522015",
"Version": "1",
"comment": "systemd-coredump is installed",
"Name": "systemd-coredump"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522016",
"Version": "1",
"comment": "systemd-homed is installed",
"Name": "systemd-homed"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522017",
"Version": "1",
"comment": "systemd-journal-remote is installed",
"Name": "systemd-journal-remote"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522018",
"Version": "1",
"comment": "systemd-modules-common is installed",
"Name": "systemd-modules-common"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522019",
"Version": "1",
"comment": "systemd-networkd is installed",
"Name": "systemd-networkd"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522020",
"Version": "1",
"comment": "systemd-oomd-defaults is installed",
"Name": "systemd-oomd-defaults"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522021",
"Version": "1",
"comment": "systemd-portable is installed",
"Name": "systemd-portable"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522022",
"Version": "1",
"comment": "systemd-stateless is installed",
"Name": "systemd-stateless"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522023",
"Version": "1",
"comment": "systemd-sysctl-common is installed",
"Name": "systemd-sysctl-common"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522024",
"Version": "1",
"comment": "systemd-sysvinit is installed",
"Name": "systemd-sysvinit"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522025",
"Version": "1",
"comment": "systemd-tests is installed",
"Name": "systemd-tests"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522026",
"Version": "1",
"comment": "systemd-timesyncd is installed",
"Name": "systemd-timesyncd"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522027",
"Version": "1",
"comment": "systemd-tmpfiles-common is installed",
"Name": "systemd-tmpfiles-common"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522028",
"Version": "1",
"comment": "systemd-utils-filetriggers is installed",
"Name": "systemd-utils-filetriggers"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522029",
"Version": "1",
"comment": "systemd-utils-standalone is installed",
"Name": "systemd-utils-standalone"
},
{
"ID": "oval:org.altlinux.errata:obj:20244522030",
"Version": "1",
"comment": "udev is installed",
"Name": "udev"
}
]
}

23
oval/c10f2/ALT-PU-2024-4522/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244522001",
"Version": "1",
"Comment": "package EVR is earlier than 1:249.17-alt2",
"Arch": {},
"Evr": {
"Text": "1:249.17-alt2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

378
oval/c10f2/ALT-PU-2024-4522/tests.json Normal file
View File

@ -0,0 +1,378 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244522001",
"Version": "1",
"Check": "all",
"Comment": "libnss-myhostname is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522002",
"Version": "1",
"Check": "all",
"Comment": "libnss-mymachines is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522003",
"Version": "1",
"Check": "all",
"Comment": "libnss-resolve is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522004",
"Version": "1",
"Check": "all",
"Comment": "libnss-systemd is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522005",
"Version": "1",
"Check": "all",
"Comment": "libsystemd is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522006",
"Version": "1",
"Check": "all",
"Comment": "libsystemd-devel is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522007",
"Version": "1",
"Check": "all",
"Comment": "libudev-devel is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522008",
"Version": "1",
"Check": "all",
"Comment": "libudev1 is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522009",
"Version": "1",
"Check": "all",
"Comment": "pam_systemd is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522010",
"Version": "1",
"Check": "all",
"Comment": "pam_systemd_home is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522011",
"Version": "1",
"Check": "all",
"Comment": "systemd is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522011"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522012",
"Version": "1",
"Check": "all",
"Comment": "systemd-analyze is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522012"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522013",
"Version": "1",
"Check": "all",
"Comment": "systemd-boot-efi is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522013"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522014",
"Version": "1",
"Check": "all",
"Comment": "systemd-container is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522014"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522015",
"Version": "1",
"Check": "all",
"Comment": "systemd-coredump is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522015"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522016",
"Version": "1",
"Check": "all",
"Comment": "systemd-homed is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522016"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522017",
"Version": "1",
"Check": "all",
"Comment": "systemd-journal-remote is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522017"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522018",
"Version": "1",
"Check": "all",
"Comment": "systemd-modules-common is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522018"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522019",
"Version": "1",
"Check": "all",
"Comment": "systemd-networkd is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522019"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522020",
"Version": "1",
"Check": "all",
"Comment": "systemd-oomd-defaults is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522020"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522021",
"Version": "1",
"Check": "all",
"Comment": "systemd-portable is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522021"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522022",
"Version": "1",
"Check": "all",
"Comment": "systemd-stateless is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522022"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522023",
"Version": "1",
"Check": "all",
"Comment": "systemd-sysctl-common is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522023"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522024",
"Version": "1",
"Check": "all",
"Comment": "systemd-sysvinit is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522024"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522025",
"Version": "1",
"Check": "all",
"Comment": "systemd-tests is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522025"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522026",
"Version": "1",
"Check": "all",
"Comment": "systemd-timesyncd is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522026"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522027",
"Version": "1",
"Check": "all",
"Comment": "systemd-tmpfiles-common is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522027"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522028",
"Version": "1",
"Check": "all",
"Comment": "systemd-utils-filetriggers is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522028"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522029",
"Version": "1",
"Check": "all",
"Comment": "systemd-utils-standalone is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522029"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244522030",
"Version": "1",
"Check": "all",
"Comment": "udev is earlier than 1:249.17-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244522030"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244522001"
}
}
]
}

238
oval/p10/ALT-PU-2024-2130/definitions.json Normal file
View File

@ -0,0 +1,238 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20242130",
"Version": "oval:org.altlinux.errata:def:20242130",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-2130: package `ruby` update to version 3.1.4-alt2.p10.1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-2130",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-2130",
"Source": "ALTPU"
},
{
"RefID": "BDU:2023-03834",
"RefURL": "https://bdu.fstec.ru/vul/2023-03834",
"Source": "BDU"
},
{
"RefID": "BDU:2023-06647",
"RefURL": "https://bdu.fstec.ru/vul/2023-06647",
"Source": "BDU"
},
{
"RefID": "CVE-2021-33621",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-33621",
"Source": "CVE"
},
{
"RefID": "CVE-2022-39253",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-39253",
"Source": "CVE"
}
],
"Description": "This update upgrades ruby to version 3.1.4-alt2.p10.1. \nSecurity Fix(es):\n\n * BDU:2023-03834: Уязвимость компонента CGI языка программирования Ruby, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании\n\n * BDU:2023-06647: Уязвимость распределенной системы контроля версий Git для Windows, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить доступ к конфиденциальной информации\n\n * CVE-2021-33621: The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.\n\n * CVE-2022-39253: Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (where the source and target of the clone are on the same volume), Git copies the contents of the source's `$GIT_DIR/objects` directory into the destination by either creating hardlinks to the source contents, or copying them (if hardlinks are disabled via `--no-hardlinks`). A malicious actor could convince a victim to clone a repository with a symbolic link pointing at sensitive information on the victim's machine. This can be done either by having the victim clone a malicious repository on the same machine, or having them clone a malicious repository embedded as a bare repository via a submodule from any source, provided they clone with the `--recurse-submodules` option. Git does not create symbolic links in the `$GIT_DIR/objects` directory. The problem has been patched in the versions published on 2022-10-18, and backported to v2.30.x. Potential workarounds: Avoid cloning untrusted repositories using the `--local` optimization when on a shared machine, either by passing the `--no-local` option to `git clone` or cloning from a URL that uses the `file://` scheme. Alternatively, avoid cloning repositories from untrusted sources with `--recurse-submodules` or run `git config --global protocol.file.allow user`.\n\n * #36294: ri не показывает документацию\n\n * #45251: gem: Permission denied @ dir_s_mkdir - /var/cache/ruby/gemie/rubygems.org%443\n\n * #46576: ruby: сборочная зависимость от самой себя\n\n * #47660: Ошибка No such file or directory @ rb_sysopen при установке gem пакетов\n\n * #47868: Собрать свежий ruby\n\n * #48249: wrong ELF class: ELFCLASS32 - /usr/lib/ruby/psych.so (LoadError)\n\n * #48325: Не работает gem server\n\n * #48713: Удалить openssl 1.1\n\n * #48812: Попытка установить 16 новых пакетов при обновлении ruby",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-29"
},
"Updated": {
"Date": "2024-03-29"
},
"bdu": [
{
"Cvss": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"Cvss3": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-436",
"Href": "https://bdu.fstec.ru/vul/2023-03834",
"Impact": "High",
"Public": "20221122",
"CveID": "BDU:2023-03834"
},
{
"Cvss": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"Cvss3": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"Cwe": "CWE-200",
"Href": "https://bdu.fstec.ru/vul/2023-06647",
"Impact": "Low",
"Public": "20221108",
"CveID": "BDU:2023-06647"
}
],
"Cves": [
{
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-74",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-33621",
"Impact": "High",
"Public": "20221118",
"CveID": "CVE-2021-33621"
},
{
"Cvss3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"Cwe": "CWE-59",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-39253",
"Impact": "Low",
"Public": "20221019",
"CveID": "CVE-2022-39253"
}
],
"Bugzilla": [
{
"Id": "36294",
"Href": "https://bugzilla.altlinux.org/36294",
"Data": "ri не показывает документацию"
},
{
"Id": "45251",
"Href": "https://bugzilla.altlinux.org/45251",
"Data": "gem: Permission denied @ dir_s_mkdir - /var/cache/ruby/gemie/rubygems.org%443"
},
{
"Id": "46576",
"Href": "https://bugzilla.altlinux.org/46576",
"Data": "ruby: сборочная зависимость от самой себя"
},
{
"Id": "47660",
"Href": "https://bugzilla.altlinux.org/47660",
"Data": "Ошибка No such file or directory @ rb_sysopen при установке gem пакетов"
},
{
"Id": "47868",
"Href": "https://bugzilla.altlinux.org/47868",
"Data": "Собрать свежий ruby"
},
{
"Id": "48249",
"Href": "https://bugzilla.altlinux.org/48249",
"Data": "wrong ELF class: ELFCLASS32 - /usr/lib/ruby/psych.so (LoadError)"
},
{
"Id": "48325",
"Href": "https://bugzilla.altlinux.org/48325",
"Data": "Не работает gem server"
},
{
"Id": "48713",
"Href": "https://bugzilla.altlinux.org/48713",
"Data": "Удалить openssl 1.1"
},
{
"Id": "48812",
"Href": "https://bugzilla.altlinux.org/48812",
"Data": "Попытка установить 16 новых пакетов при обновлении ruby"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20242130001",
"Comment": "erb is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130002",
"Comment": "gem is earlier than 2:3.3.26-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130003",
"Comment": "irb is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130004",
"Comment": "libruby is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130005",
"Comment": "libruby-devel is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130006",
"Comment": "rpm-macros-ruby is earlier than 1:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130007",
"Comment": "ruby is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130008",
"Comment": "ruby-devel is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130009",
"Comment": "ruby-doc is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130010",
"Comment": "ruby-doc-html is earlier than 0:3.1.4-alt2.p10.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20242130011",
"Comment": "ruby-stdlibs is earlier than 0:3.1.4-alt2.p10.1"
}
]
}
]
}
}
]
}

94
oval/p10/ALT-PU-2024-2130/objects.json Normal file
View File

@ -0,0 +1,94 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20242130001",
"Version": "1",
"comment": "erb is installed",
"Name": "erb"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130002",
"Version": "1",
"comment": "gem is installed",
"Name": "gem"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130003",
"Version": "1",
"comment": "irb is installed",
"Name": "irb"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130004",
"Version": "1",
"comment": "libruby is installed",
"Name": "libruby"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130005",
"Version": "1",
"comment": "libruby-devel is installed",
"Name": "libruby-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130006",
"Version": "1",
"comment": "rpm-macros-ruby is installed",
"Name": "rpm-macros-ruby"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130007",
"Version": "1",
"comment": "ruby is installed",
"Name": "ruby"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130008",
"Version": "1",
"comment": "ruby-devel is installed",
"Name": "ruby-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130009",
"Version": "1",
"comment": "ruby-doc is installed",
"Name": "ruby-doc"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130010",
"Version": "1",
"comment": "ruby-doc-html is installed",
"Name": "ruby-doc-html"
},
{
"ID": "oval:org.altlinux.errata:obj:20242130011",
"Version": "1",
"comment": "ruby-stdlibs is installed",
"Name": "ruby-stdlibs"
}
]
}

47
oval/p10/ALT-PU-2024-2130/states.json Normal file
View File

@ -0,0 +1,47 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20242130001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.1.4-alt2.p10.1",
"Arch": {},
"Evr": {
"Text": "0:3.1.4-alt2.p10.1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
},
{
"ID": "oval:org.altlinux.errata:ste:20242130002",
"Version": "1",
"Comment": "package EVR is earlier than 2:3.3.26-alt2.p10.1",
"Arch": {},
"Evr": {
"Text": "2:3.3.26-alt2.p10.1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
},
{
"ID": "oval:org.altlinux.errata:ste:20242130003",
"Version": "1",
"Comment": "package EVR is earlier than 1:3.1.4-alt2.p10.1",
"Arch": {},
"Evr": {
"Text": "1:3.1.4-alt2.p10.1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

150
oval/p10/ALT-PU-2024-2130/tests.json Normal file
View File

@ -0,0 +1,150 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20242130001",
"Version": "1",
"Check": "all",
"Comment": "erb is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130002",
"Version": "1",
"Check": "all",
"Comment": "gem is earlier than 2:3.3.26-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130002"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130003",
"Version": "1",
"Check": "all",
"Comment": "irb is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130004",
"Version": "1",
"Check": "all",
"Comment": "libruby is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130005",
"Version": "1",
"Check": "all",
"Comment": "libruby-devel is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130006",
"Version": "1",
"Check": "all",
"Comment": "rpm-macros-ruby is earlier than 1:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130003"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130007",
"Version": "1",
"Check": "all",
"Comment": "ruby is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130008",
"Version": "1",
"Check": "all",
"Comment": "ruby-devel is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130009",
"Version": "1",
"Check": "all",
"Comment": "ruby-doc is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130010",
"Version": "1",
"Check": "all",
"Comment": "ruby-doc-html is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20242130011",
"Version": "1",
"Check": "all",
"Comment": "ruby-stdlibs is earlier than 0:3.1.4-alt2.p10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20242130011"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20242130001"
}
}
]
}

106
oval/p10/ALT-PU-2024-3508/definitions.json Normal file
View File

@ -0,0 +1,106 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20243508",
"Version": "oval:org.altlinux.errata:def:20243508",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-3508: package `puppetserver` update to version 6.20.0-alt4",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-3508",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-3508",
"Source": "ALTPU"
}
],
"Description": "This update upgrades puppetserver to version 6.20.0-alt4. \nSecurity Fix(es):\n\n * #49602: puppetserver.service: Standard output type syslog is obsolete\n\n * #49603: Не запускается puppetserver.service (Could not find 'locale' (~\u003e 2.1))",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-29"
},
"Updated": {
"Date": "2024-03-29"
},
"bdu": null,
"Bugzilla": [
{
"Id": "49602",
"Href": "https://bugzilla.altlinux.org/49602",
"Data": "puppetserver.service: Standard output type syslog is obsolete"
},
{
"Id": "49603",
"Href": "https://bugzilla.altlinux.org/49603",
"Data": "Не запускается puppetserver.service (Could not find 'locale' (~\u003e 2.1))"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20243508001",
"Comment": "puppetserver is earlier than 0:6.20.0-alt4"
}
]
}
]
}
}
]
}

34
oval/p10/ALT-PU-2024-3508/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20243508001",
"Version": "1",
"comment": "puppetserver is installed",
"Name": "puppetserver"
}
]
}

23
oval/p10/ALT-PU-2024-3508/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20243508001",
"Version": "1",
"Comment": "package EVR is earlier than 0:6.20.0-alt4",
"Arch": {},
"Evr": {
"Text": "0:6.20.0-alt4",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/p10/ALT-PU-2024-3508/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20243508001",
"Version": "1",
"Check": "all",
"Comment": "puppetserver is earlier than 0:6.20.0-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20243508001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20243508001"
}
}
]
}

667
oval/p10/ALT-PU-2024-4537/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

46
oval/p10/ALT-PU-2024-4537/objects.json Normal file
View File

@ -0,0 +1,46 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244537001",
"Version": "1",
"comment": "itop is installed",
"Name": "itop"
},
{
"ID": "oval:org.altlinux.errata:obj:20244537002",
"Version": "1",
"comment": "itop-apache2 is installed",
"Name": "itop-apache2"
},
{
"ID": "oval:org.altlinux.errata:obj:20244537003",
"Version": "1",
"comment": "itop-php8.1 is installed",
"Name": "itop-php8.1"
}
]
}

23
oval/p10/ALT-PU-2024-4537/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244537001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.1.1.1-alt1",
"Arch": {},
"Evr": {
"Text": "0:3.1.1.1-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

54
oval/p10/ALT-PU-2024-4537/tests.json Normal file
View File

@ -0,0 +1,54 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244537001",
"Version": "1",
"Check": "all",
"Comment": "itop is earlier than 0:3.1.1.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244537001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244537002",
"Version": "1",
"Check": "all",
"Comment": "itop-apache2 is earlier than 0:3.1.1.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244537002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244537001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244537003",
"Version": "1",
"Check": "all",
"Comment": "itop-php8.1 is earlier than 0:3.1.1.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244537003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244537001"
}
}
]
}

117
oval/p10/ALT-PU-2024-4691/definitions.json Normal file
View File

@ -0,0 +1,117 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244691",
"Version": "oval:org.altlinux.errata:def:20244691",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4691: package `gem-rdoc` update to version 6.6.3.1-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4691",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4691",
"Source": "ALTPU"
}
],
"Description": "This update upgrades gem-rdoc to version 6.6.3.1-alt1. \nSecurity Fix(es):\n\n * #49288: cannot load such file -- /usr/lib/ruby/gemie/gems/rdoc-6.6.2/lib/rdoc/markdown (LoadError)",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-29"
},
"Updated": {
"Date": "2024-03-29"
},
"bdu": null,
"Bugzilla": [
{
"Id": "49288",
"Href": "https://bugzilla.altlinux.org/49288",
"Data": "cannot load such file -- /usr/lib/ruby/gemie/gems/rdoc-6.6.2/lib/rdoc/markdown (LoadError)"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244691001",
"Comment": "gem-rdoc is earlier than 0:6.6.3.1-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244691002",
"Comment": "gem-rdoc-devel is earlier than 0:6.6.3.1-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244691003",
"Comment": "gem-rdoc-doc is earlier than 0:6.6.3.1-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244691004",
"Comment": "rdoc is earlier than 0:6.6.3.1-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244691005",
"Comment": "ri is earlier than 0:6.6.3.1-alt1"
}
]
}
]
}
}
]
}

58
oval/p10/ALT-PU-2024-4691/objects.json Normal file
View File

@ -0,0 +1,58 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244691001",
"Version": "1",
"comment": "gem-rdoc is installed",
"Name": "gem-rdoc"
},
{
"ID": "oval:org.altlinux.errata:obj:20244691002",
"Version": "1",
"comment": "gem-rdoc-devel is installed",
"Name": "gem-rdoc-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20244691003",
"Version": "1",
"comment": "gem-rdoc-doc is installed",
"Name": "gem-rdoc-doc"
},
{
"ID": "oval:org.altlinux.errata:obj:20244691004",
"Version": "1",
"comment": "rdoc is installed",
"Name": "rdoc"
},
{
"ID": "oval:org.altlinux.errata:obj:20244691005",
"Version": "1",
"comment": "ri is installed",
"Name": "ri"
}
]
}

23
oval/p10/ALT-PU-2024-4691/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244691001",
"Version": "1",
"Comment": "package EVR is earlier than 0:6.6.3.1-alt1",
"Arch": {},
"Evr": {
"Text": "0:6.6.3.1-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

78
oval/p10/ALT-PU-2024-4691/tests.json Normal file
View File

@ -0,0 +1,78 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244691001",
"Version": "1",
"Check": "all",
"Comment": "gem-rdoc is earlier than 0:6.6.3.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244691001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244691001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244691002",
"Version": "1",
"Check": "all",
"Comment": "gem-rdoc-devel is earlier than 0:6.6.3.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244691002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244691001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244691003",
"Version": "1",
"Check": "all",
"Comment": "gem-rdoc-doc is earlier than 0:6.6.3.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244691003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244691001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244691004",
"Version": "1",
"Check": "all",
"Comment": "rdoc is earlier than 0:6.6.3.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244691004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244691001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244691005",
"Version": "1",
"Check": "all",
"Comment": "ri is earlier than 0:6.6.3.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244691005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244691001"
}
}
]
}