pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2024-09-03 03:06:01 +00:00
parent 3abc974422
commit 601a1cb215
28 changed files with 2155 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

91
oval/c10f1/ALT-PU-2024-11765/definitions.json Normal file
View File

@ -0,0 +1,91 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202411765",
"Version": "oval:org.altlinux.errata:def:202411765",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-11765: package `zoneminder` update to version 1.36.34-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f1"
],
"Products": [
"ALT SP Workstation",
"ALT SP Server"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-11765",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11765",
"Source": "ALTPU"
},
{
"RefID": "CVE-2024-43360",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-43360",
"Source": "CVE"
}
],
"Description": "This update upgrades zoneminder to version 1.36.34-alt1. \nSecurity Fix(es):\n\n * CVE-2024-43360: ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-09-02"
},
"Updated": {
"Date": "2024-09-02"
},
"BDUs": null,
"CVEs": [
{
"ID": "CVE-2024-43360",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-43360",
"Impact": "None",
"Public": "20240812"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:4001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202411765001",
"Comment": "zoneminder is earlier than 0:1.36.34-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411765002",
"Comment": "zoneminder-api is earlier than 0:1.36.34-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411765003",
"Comment": "zoneminder-nginx is earlier than 0:1.36.34-alt1"
}
]
}
]
}
}
]
}

46
oval/c10f1/ALT-PU-2024-11765/objects.json Normal file
View File

@ -0,0 +1,46 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:4001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202411765001",
"Version": "1",
"Comment": "zoneminder is installed",
"Name": "zoneminder"
},
{
"ID": "oval:org.altlinux.errata:obj:202411765002",
"Version": "1",
"Comment": "zoneminder-api is installed",
"Name": "zoneminder-api"
},
{
"ID": "oval:org.altlinux.errata:obj:202411765003",
"Version": "1",
"Comment": "zoneminder-nginx is installed",
"Name": "zoneminder-nginx"
}
]
}

23
oval/c10f1/ALT-PU-2024-11765/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:4001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202411765001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.36.34-alt1",
"Arch": {},
"EVR": {
"Text": "0:1.36.34-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

54
oval/c10f1/ALT-PU-2024-11765/tests.json Normal file
View File

@ -0,0 +1,54 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:4001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:4001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:4001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202411765001",
"Version": "1",
"Check": "all",
"Comment": "zoneminder is earlier than 0:1.36.34-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411765001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411765001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411765002",
"Version": "1",
"Check": "all",
"Comment": "zoneminder-api is earlier than 0:1.36.34-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411765002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411765001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411765003",
"Version": "1",
"Check": "all",
"Comment": "zoneminder-nginx is earlier than 0:1.36.34-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411765003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411765001"
}
}
]
}

86
oval/c9f2/ALT-PU-2024-11877/definitions.json Normal file
View File

@ -0,0 +1,86 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202411877",
"Version": "oval:org.altlinux.errata:def:202411877",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-11877: package `logrotate` update to version 3.20.1-alt2",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-11877",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11877",
"Source": "ALTPU"
},
{
"RefID": "CVE-2022-1348",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-1348",
"Source": "CVE"
}
],
"Description": "This update upgrades logrotate to version 3.20.1-alt2. \nSecurity Fix(es):\n\n * CVE-2022-1348: A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-09-02"
},
"Updated": {
"Date": "2024-09-02"
},
"BDUs": null,
"CVEs": [
{
"ID": "CVE-2022-1348",
"CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-732",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-1348",
"Impact": "Low",
"Public": "20220525"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202411877001",
"Comment": "logrotate is earlier than 0:3.20.1-alt2"
}
]
}
]
}
}
]
}

34
oval/c9f2/ALT-PU-2024-11877/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202411877001",
"Version": "1",
"Comment": "logrotate is installed",
"Name": "logrotate"
}
]
}

23
oval/c9f2/ALT-PU-2024-11877/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202411877001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.20.1-alt2",
"Arch": {},
"EVR": {
"Text": "0:3.20.1-alt2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/c9f2/ALT-PU-2024-11877/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202411877001",
"Version": "1",
"Check": "all",
"Comment": "logrotate is earlier than 0:3.20.1-alt2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411877001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411877001"
}
}
]
}

128
oval/p10/ALT-PU-2024-11696/definitions.json Normal file
View File

@ -0,0 +1,128 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202411696",
"Version": "oval:org.altlinux.errata:def:202411696",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-11696: package `palemoon` update to version 33.3.0-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-11696",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11696",
"Source": "ALTPU"
},
{
"RefID": "BDU:2024-06469",
"RefURL": "https://bdu.fstec.ru/vul/2024-06469",
"Source": "BDU"
},
{
"RefID": "CVE-2024-7531",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-7531",
"Source": "CVE"
}
],
"Description": "This update upgrades palemoon to version 33.3.0-alt1. \nSecurity Fix(es):\n\n * BDU:2024-06469: Уязвимость компоненте шифрования NSS браузеров Mozilla Firefox, Firefox ESR, позволяющая нарушителю получить доступ к защищаемой информации\n\n * CVE-2024-7531: Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite. The most likely outcome is connection failure, but if the connection persists despite the high packet loss it could be possible for a network observer to identify packets as coming from the same source despite a network path change. This vulnerability affects Firefox \u003c 129, Firefox ESR \u003c 115.14, and Firefox ESR \u003c 128.1.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-09-02"
},
"Updated": {
"Date": "2024-09-02"
},
"BDUs": [
{
"ID": "BDU:2024-06469",
"CVSS": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"CVSS3": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"CWE": "CWE-122, CWE-310, CWE-311",
"Href": "https://bdu.fstec.ru/vul/2024-06469",
"Impact": "Low",
"Public": "20240806"
}
],
"CVEs": [
{
"ID": "CVE-2024-7531",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"CWE": "NVD-CWE-noinfo",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-7531",
"Impact": "Low",
"Public": "20240806"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202411696001",
"Comment": "newmoon is earlier than 2:33.3.0-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411696002",
"Comment": "rpm-build-palemoon is earlier than 2:33.3.0-alt1"
}
]
}
]
}
}
]
}

40
oval/p10/ALT-PU-2024-11696/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202411696001",
"Version": "1",
"Comment": "newmoon is installed",
"Name": "newmoon"
},
{
"ID": "oval:org.altlinux.errata:obj:202411696002",
"Version": "1",
"Comment": "rpm-build-palemoon is installed",
"Name": "rpm-build-palemoon"
}
]
}

23
oval/p10/ALT-PU-2024-11696/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202411696001",
"Version": "1",
"Comment": "package EVR is earlier than 2:33.3.0-alt1",
"Arch": {},
"EVR": {
"Text": "2:33.3.0-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/p10/ALT-PU-2024-11696/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202411696001",
"Version": "1",
"Check": "all",
"Comment": "newmoon is earlier than 2:33.3.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411696001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411696001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411696002",
"Version": "1",
"Check": "all",
"Comment": "rpm-build-palemoon is earlier than 2:33.3.0-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411696002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411696001"
}
}
]
}

171
oval/p10/ALT-PU-2024-11779/definitions.json Normal file
View File

@ -0,0 +1,171 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202411779",
"Version": "oval:org.altlinux.errata:def:202411779",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-11779: package `docs-alt-server-v` update to version 10.2-alt5",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-11779",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11779",
"Source": "ALTPU"
}
],
"Description": "This update upgrades docs-alt-server-v to version 10.2-alt5. \nSecurity Fix(es):\n\n * #51175: Документация docs-alt-server-v, ⁠раздел V. Средство управления виртуальными окружениями PVE: поправки в описании по настройке PVE\n\n * #51200: Документация docs-alt-server-v, ⁠п.⁠51.2. Пулы ресурсов: отредактировать описание в шагах по настройке пулов PVE\n\n * #51213: Документация docs-alt-server-v, ⁠ ⁠Глава 39. Системы хранения PVE: улучшения в описании настройки хранилищ PVE\n\n * #51218: Документация docs-alt-server-v, Глава 52. Просмотр событий PVE: ошибки пунктуации\n\n * #51219: Документация docs-alt-server-v, ⁠Глава 46. Шаблоны ВМ: указать детали перед преобразованием ВМ в шаблон\n\n * #51228: Документация docs-alt-server-v, Глава 42. Виртуальные машины на базе KVM⁠: опечатка в списке с описанием команд\n\n * #51232: Документация docs-alt-server-v, Глава 47. Теги (метки) ВМ: указать команду с экранированием\n\n * #51254: Документация docs-alt-server-v, п.42.4. Скрипты-ловушки (hookscripts): опечатки в предложениях\n\n * #51258: Документация docs-alt-server-v, п. ⁠42.4. Скрипты-ловушки (hookscripts): не отрабатывает команда из примера целиком для добавления скрипта-ловушки, поправки\n\n * #51263: Документация docs-alt-server-v, п. ⁠42.6.6. Доверенный платформенный модуль (TPM) : ошибки пунктуации и поправка по описанию к команде\n\n * #51266: Документация docs-alt-server-v, п. ⁠42.6.8. Гостевой агент QEMU: задублированный предлог в предложении\n\n * #51276: Документация docs-alt-server-v, п. ⁠4.1.1.2. Запись образа диска с помощью Nero BurningROM: опечатка\n\n * #51279: Документация docs-alt-server-v, п. ⁠70.1. Модуль Ethernet-интерфейсы: нет запятой в предложении\n\n * #51286: Документация docs-alt-server-v, п. ⁠56.3. Утилита qemu-img: опечатка в слове\n\n * #51291: Документация docs-alt-server-v, п. ⁠58.1. Создание ВМ на основе файла конфигурации (утилита virsh): не срабатывает переход по ссылке",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-09-02"
},
"Updated": {
"Date": "2024-09-02"
},
"BDUs": null,
"Bugzilla": [
{
"ID": "51175",
"Href": "https://bugzilla.altlinux.org/51175",
"Data": "Документация docs-alt-server-v, ⁠раздел V. Средство управления виртуальными окружениями PVE: поправки в описании по настройке PVE"
},
{
"ID": "51200",
"Href": "https://bugzilla.altlinux.org/51200",
"Data": "Документация docs-alt-server-v, ⁠п.⁠51.2. Пулы ресурсов: отредактировать описание в шагах по настройке пулов PVE"
},
{
"ID": "51213",
"Href": "https://bugzilla.altlinux.org/51213",
"Data": "Документация docs-alt-server-v, ⁠ ⁠Глава 39. Системы хранения PVE: улучшения в описании настройки хранилищ PVE"
},
{
"ID": "51218",
"Href": "https://bugzilla.altlinux.org/51218",
"Data": "Документация docs-alt-server-v, Глава 52. Просмотр событий PVE: ошибки пунктуации"
},
{
"ID": "51219",
"Href": "https://bugzilla.altlinux.org/51219",
"Data": "Документация docs-alt-server-v, ⁠Глава 46. Шаблоны ВМ: указать детали перед преобразованием ВМ в шаблон"
},
{
"ID": "51228",
"Href": "https://bugzilla.altlinux.org/51228",
"Data": "Документация docs-alt-server-v, Глава 42. Виртуальные машины на базе KVM⁠: опечатка в списке с описанием команд"
},
{
"ID": "51232",
"Href": "https://bugzilla.altlinux.org/51232",
"Data": "Документация docs-alt-server-v, Глава 47. Теги (метки) ВМ: указать команду с экранированием"
},
{
"ID": "51254",
"Href": "https://bugzilla.altlinux.org/51254",
"Data": "Документация docs-alt-server-v, п.42.4. Скрипты-ловушки (hookscripts): опечатки в предложениях"
},
{
"ID": "51258",
"Href": "https://bugzilla.altlinux.org/51258",
"Data": "Документация docs-alt-server-v, п. ⁠42.4. Скрипты-ловушки (hookscripts): не отрабатывает команда из примера целиком для добавления скрипта-ловушки, поправки"
},
{
"ID": "51263",
"Href": "https://bugzilla.altlinux.org/51263",
"Data": "Документация docs-alt-server-v, п. ⁠42.6.6. Доверенный платформенный модуль (TPM) : ошибки пунктуации и поправка по описанию к команде"
},
{
"ID": "51266",
"Href": "https://bugzilla.altlinux.org/51266",
"Data": "Документация docs-alt-server-v, п. ⁠42.6.8. Гостевой агент QEMU: задублированный предлог в предложении"
},
{
"ID": "51276",
"Href": "https://bugzilla.altlinux.org/51276",
"Data": "Документация docs-alt-server-v, п. ⁠4.1.1.2. Запись образа диска с помощью Nero BurningROM: опечатка"
},
{
"ID": "51279",
"Href": "https://bugzilla.altlinux.org/51279",
"Data": "Документация docs-alt-server-v, п. ⁠70.1. Модуль Ethernet-интерфейсы: нет запятой в предложении"
},
{
"ID": "51286",
"Href": "https://bugzilla.altlinux.org/51286",
"Data": "Документация docs-alt-server-v, п. ⁠56.3. Утилита qemu-img: опечатка в слове"
},
{
"ID": "51291",
"Href": "https://bugzilla.altlinux.org/51291",
"Data": "Документация docs-alt-server-v, п. ⁠58.1. Создание ВМ на основе файла конфигурации (утилита virsh): не срабатывает переход по ссылке"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202411779001",
"Comment": "docs-alt-server-v is earlier than 0:10.2-alt5"
}
]
}
]
}
}
]
}

34
oval/p10/ALT-PU-2024-11779/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202411779001",
"Version": "1",
"Comment": "docs-alt-server-v is installed",
"Name": "docs-alt-server-v"
}
]
}

23
oval/p10/ALT-PU-2024-11779/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202411779001",
"Version": "1",
"Comment": "package EVR is earlier than 0:10.2-alt5",
"Arch": {},
"EVR": {
"Text": "0:10.2-alt5",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/p10/ALT-PU-2024-11779/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202411779001",
"Version": "1",
"Check": "all",
"Comment": "docs-alt-server-v is earlier than 0:10.2-alt5",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411779001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411779001"
}
}
]
}

308
oval/p10/ALT-PU-2024-11781/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

70
oval/p10/ALT-PU-2024-11781/objects.json Normal file
View File

@ -0,0 +1,70 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202411781001",
"Version": "1",
"Comment": "golang is installed",
"Name": "golang"
},
{
"ID": "oval:org.altlinux.errata:obj:202411781002",
"Version": "1",
"Comment": "golang-docs is installed",
"Name": "golang-docs"
},
{
"ID": "oval:org.altlinux.errata:obj:202411781003",
"Version": "1",
"Comment": "golang-gdb is installed",
"Name": "golang-gdb"
},
{
"ID": "oval:org.altlinux.errata:obj:202411781004",
"Version": "1",
"Comment": "golang-misc is installed",
"Name": "golang-misc"
},
{
"ID": "oval:org.altlinux.errata:obj:202411781005",
"Version": "1",
"Comment": "golang-shared is installed",
"Name": "golang-shared"
},
{
"ID": "oval:org.altlinux.errata:obj:202411781006",
"Version": "1",
"Comment": "golang-src is installed",
"Name": "golang-src"
},
{
"ID": "oval:org.altlinux.errata:obj:202411781007",
"Version": "1",
"Comment": "golang-tests is installed",
"Name": "golang-tests"
}
]
}

23
oval/p10/ALT-PU-2024-11781/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202411781001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.22.6-alt1",
"Arch": {},
"EVR": {
"Text": "0:1.22.6-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

102
oval/p10/ALT-PU-2024-11781/tests.json Normal file
View File

@ -0,0 +1,102 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202411781001",
"Version": "1",
"Check": "all",
"Comment": "golang is earlier than 0:1.22.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411781001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411781001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411781002",
"Version": "1",
"Check": "all",
"Comment": "golang-docs is earlier than 0:1.22.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411781002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411781001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411781003",
"Version": "1",
"Check": "all",
"Comment": "golang-gdb is earlier than 0:1.22.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411781003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411781001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411781004",
"Version": "1",
"Check": "all",
"Comment": "golang-misc is earlier than 0:1.22.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411781004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411781001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411781005",
"Version": "1",
"Check": "all",
"Comment": "golang-shared is earlier than 0:1.22.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411781005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411781001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411781006",
"Version": "1",
"Check": "all",
"Comment": "golang-src is earlier than 0:1.22.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411781006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411781001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411781007",
"Version": "1",
"Check": "all",
"Comment": "golang-tests is earlier than 0:1.22.6-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411781007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411781001"
}
}
]
}

148
oval/p9/ALT-PU-2024-11579/definitions.json Normal file
View File

@ -0,0 +1,148 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202411579",
"Version": "oval:org.altlinux.errata:def:202411579",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-11579: package `postgresql12-1C` update to version 12.20-alt0.M90P.1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p9"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-11579",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11579",
"Source": "ALTPU"
},
{
"RefID": "BDU:2024-06153",
"RefURL": "https://bdu.fstec.ru/vul/2024-06153",
"Source": "BDU"
},
{
"RefID": "CVE-2024-7348",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-7348",
"Source": "CVE"
}
],
"Description": "This update upgrades postgresql12-1C to version 12.20-alt0.M90P.1. \nSecurity Fix(es):\n\n * BDU:2024-06153: Уязвимость утилиты pg_dump системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольный SQL-код\n\n * CVE-2024-7348: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-09-02"
},
"Updated": {
"Date": "2024-09-02"
},
"BDUs": [
{
"ID": "BDU:2024-06153",
"CVSS": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"CWE": "CWE-367",
"Href": "https://bdu.fstec.ru/vul/2024-06153",
"Impact": "High",
"Public": "20240808"
}
],
"CVEs": [
{
"ID": "CVE-2024-7348",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"CWE": "CWE-367",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-7348",
"Impact": "High",
"Public": "20240808"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:9",
"cpe:/o:alt:workstation:9",
"cpe:/o:alt:server:9",
"cpe:/o:alt:server-v:9",
"cpe:/o:alt:education:9",
"cpe:/o:alt:slinux:9",
"cpe:/o:alt:starterkit:p9",
"cpe:/o:alt:kworkstation:9.1",
"cpe:/o:alt:workstation:9.1",
"cpe:/o:alt:server:9.1",
"cpe:/o:alt:server-v:9.1",
"cpe:/o:alt:education:9.1",
"cpe:/o:alt:slinux:9.1",
"cpe:/o:alt:starterkit:9.1",
"cpe:/o:alt:kworkstation:9.2",
"cpe:/o:alt:workstation:9.2",
"cpe:/o:alt:server:9.2",
"cpe:/o:alt:server-v:9.2",
"cpe:/o:alt:education:9.2",
"cpe:/o:alt:slinux:9.2",
"cpe:/o:alt:starterkit:9.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:1001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202411579001",
"Comment": "postgresql12-1C is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411579002",
"Comment": "postgresql12-1C-contrib is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411579003",
"Comment": "postgresql12-1C-docs is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411579004",
"Comment": "postgresql12-1C-perl is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411579005",
"Comment": "postgresql12-1C-python is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411579006",
"Comment": "postgresql12-1C-server is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411579007",
"Comment": "postgresql12-1C-tcl is earlier than 0:12.20-alt0.M90P.1"
}
]
}
]
}
}
]
}

70
oval/p9/ALT-PU-2024-11579/objects.json Normal file
View File

@ -0,0 +1,70 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:1001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202411579001",
"Version": "1",
"Comment": "postgresql12-1C is installed",
"Name": "postgresql12-1C"
},
{
"ID": "oval:org.altlinux.errata:obj:202411579002",
"Version": "1",
"Comment": "postgresql12-1C-contrib is installed",
"Name": "postgresql12-1C-contrib"
},
{
"ID": "oval:org.altlinux.errata:obj:202411579003",
"Version": "1",
"Comment": "postgresql12-1C-docs is installed",
"Name": "postgresql12-1C-docs"
},
{
"ID": "oval:org.altlinux.errata:obj:202411579004",
"Version": "1",
"Comment": "postgresql12-1C-perl is installed",
"Name": "postgresql12-1C-perl"
},
{
"ID": "oval:org.altlinux.errata:obj:202411579005",
"Version": "1",
"Comment": "postgresql12-1C-python is installed",
"Name": "postgresql12-1C-python"
},
{
"ID": "oval:org.altlinux.errata:obj:202411579006",
"Version": "1",
"Comment": "postgresql12-1C-server is installed",
"Name": "postgresql12-1C-server"
},
{
"ID": "oval:org.altlinux.errata:obj:202411579007",
"Version": "1",
"Comment": "postgresql12-1C-tcl is installed",
"Name": "postgresql12-1C-tcl"
}
]
}

23
oval/p9/ALT-PU-2024-11579/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:1001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202411579001",
"Version": "1",
"Comment": "package EVR is earlier than 0:12.20-alt0.M90P.1",
"Arch": {},
"EVR": {
"Text": "0:12.20-alt0.M90P.1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

102
oval/p9/ALT-PU-2024-11579/tests.json Normal file
View File

@ -0,0 +1,102 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:1001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p9' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:1001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:1001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202411579001",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-1C is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411579001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411579001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411579002",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-1C-contrib is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411579002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411579001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411579003",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-1C-docs is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411579003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411579001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411579004",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-1C-perl is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411579004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411579001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411579005",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-1C-python is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411579005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411579001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411579006",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-1C-server is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411579006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411579001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411579007",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-1C-tcl is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411579007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411579001"
}
}
]
}

164
oval/p9/ALT-PU-2024-11581/definitions.json Normal file
View File

@ -0,0 +1,164 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202411581",
"Version": "oval:org.altlinux.errata:def:202411581",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-11581: package `postgresql12` update to version 12.20-alt0.M90P.1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p9"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-11581",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11581",
"Source": "ALTPU"
},
{
"RefID": "BDU:2024-06153",
"RefURL": "https://bdu.fstec.ru/vul/2024-06153",
"Source": "BDU"
},
{
"RefID": "CVE-2024-7348",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-7348",
"Source": "CVE"
}
],
"Description": "This update upgrades postgresql12 to version 12.20-alt0.M90P.1. \nSecurity Fix(es):\n\n * BDU:2024-06153: Уязвимость утилиты pg_dump системы управления базами данных PostgreSQL, позволяющая нарушителю выполнять произвольный SQL-код\n\n * CVE-2024-7348: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-09-02"
},
"Updated": {
"Date": "2024-09-02"
},
"BDUs": [
{
"ID": "BDU:2024-06153",
"CVSS": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"CVSS3": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"CWE": "CWE-367",
"Href": "https://bdu.fstec.ru/vul/2024-06153",
"Impact": "High",
"Public": "20240808"
}
],
"CVEs": [
{
"ID": "CVE-2024-7348",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"CWE": "CWE-367",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-7348",
"Impact": "High",
"Public": "20240808"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:9",
"cpe:/o:alt:workstation:9",
"cpe:/o:alt:server:9",
"cpe:/o:alt:server-v:9",
"cpe:/o:alt:education:9",
"cpe:/o:alt:slinux:9",
"cpe:/o:alt:starterkit:p9",
"cpe:/o:alt:kworkstation:9.1",
"cpe:/o:alt:workstation:9.1",
"cpe:/o:alt:server:9.1",
"cpe:/o:alt:server-v:9.1",
"cpe:/o:alt:education:9.1",
"cpe:/o:alt:slinux:9.1",
"cpe:/o:alt:starterkit:9.1",
"cpe:/o:alt:kworkstation:9.2",
"cpe:/o:alt:workstation:9.2",
"cpe:/o:alt:server:9.2",
"cpe:/o:alt:server-v:9.2",
"cpe:/o:alt:education:9.2",
"cpe:/o:alt:slinux:9.2",
"cpe:/o:alt:starterkit:9.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:1001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202411581001",
"Comment": "libecpg6 is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581002",
"Comment": "libpq5 is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581003",
"Comment": "postgresql-devel is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581004",
"Comment": "postgresql-devel-static is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581005",
"Comment": "postgresql12 is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581006",
"Comment": "postgresql12-contrib is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581007",
"Comment": "postgresql12-docs is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581008",
"Comment": "postgresql12-perl is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581009",
"Comment": "postgresql12-python is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581010",
"Comment": "postgresql12-server is earlier than 0:12.20-alt0.M90P.1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202411581011",
"Comment": "postgresql12-tcl is earlier than 0:12.20-alt0.M90P.1"
}
]
}
]
}
}
]
}

94
oval/p9/ALT-PU-2024-11581/objects.json Normal file
View File

@ -0,0 +1,94 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:1001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202411581001",
"Version": "1",
"Comment": "libecpg6 is installed",
"Name": "libecpg6"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581002",
"Version": "1",
"Comment": "libpq5 is installed",
"Name": "libpq5"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581003",
"Version": "1",
"Comment": "postgresql-devel is installed",
"Name": "postgresql-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581004",
"Version": "1",
"Comment": "postgresql-devel-static is installed",
"Name": "postgresql-devel-static"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581005",
"Version": "1",
"Comment": "postgresql12 is installed",
"Name": "postgresql12"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581006",
"Version": "1",
"Comment": "postgresql12-contrib is installed",
"Name": "postgresql12-contrib"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581007",
"Version": "1",
"Comment": "postgresql12-docs is installed",
"Name": "postgresql12-docs"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581008",
"Version": "1",
"Comment": "postgresql12-perl is installed",
"Name": "postgresql12-perl"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581009",
"Version": "1",
"Comment": "postgresql12-python is installed",
"Name": "postgresql12-python"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581010",
"Version": "1",
"Comment": "postgresql12-server is installed",
"Name": "postgresql12-server"
},
{
"ID": "oval:org.altlinux.errata:obj:202411581011",
"Version": "1",
"Comment": "postgresql12-tcl is installed",
"Name": "postgresql12-tcl"
}
]
}

23
oval/p9/ALT-PU-2024-11581/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:1001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202411581001",
"Version": "1",
"Comment": "package EVR is earlier than 0:12.20-alt0.M90P.1",
"Arch": {},
"EVR": {
"Text": "0:12.20-alt0.M90P.1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

150
oval/p9/ALT-PU-2024-11581/tests.json Normal file
View File

@ -0,0 +1,150 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:1001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p9' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:1001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:1001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202411581001",
"Version": "1",
"Check": "all",
"Comment": "libecpg6 is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581002",
"Version": "1",
"Check": "all",
"Comment": "libpq5 is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581003",
"Version": "1",
"Check": "all",
"Comment": "postgresql-devel is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581004",
"Version": "1",
"Check": "all",
"Comment": "postgresql-devel-static is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581005",
"Version": "1",
"Check": "all",
"Comment": "postgresql12 is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581006",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-contrib is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581007",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-docs is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581008",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-perl is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581009",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-python is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581010",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-server is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202411581011",
"Version": "1",
"Check": "all",
"Comment": "postgresql12-tcl is earlier than 0:12.20-alt0.M90P.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202411581011"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202411581001"
}
}
]
}