ALT Vulnerability
This commit is contained in:
parent
715a67cf8d
commit
7729f1f48b
100
oval/c10f1/ALT-PU-2024-11726/definitions.json
Normal file
100
oval/c10f1/ALT-PU-2024-11726/definitions.json
Normal file
@ -0,0 +1,100 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:202411726",
|
||||
"Version": "oval:org.altlinux.errata:def:202411726",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-11726: package `mongo6.0` update to version 6.0.17-alt0.c10.1",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch c10f1"
|
||||
],
|
||||
"Products": [
|
||||
"ALT SP Workstation",
|
||||
"ALT SP Server"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-11726",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11726",
|
||||
"Source": "ALTPU"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2024-6384",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-6384",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2024-7553",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-7553",
|
||||
"Source": "CVE"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades mongo6.0 to version 6.0.17-alt0.c10.1. \nSecurity Fix(es):\n\n * CVE-2024-6384: \"Hot\" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3\n\n * CVE-2024-7553: Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.\n\nRequired Configuration:\n\nOnly environments with Windows as the underlying operating system is affected by this issue",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "Low",
|
||||
"Rights": "Copyright 2024 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-08-29"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-08-29"
|
||||
},
|
||||
"BDUs": null,
|
||||
"CVEs": [
|
||||
{
|
||||
"ID": "CVE-2024-6384",
|
||||
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
|
||||
"CWE": "NVD-CWE-noinfo",
|
||||
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-6384",
|
||||
"Impact": "Low",
|
||||
"Public": "20240813"
|
||||
},
|
||||
{
|
||||
"ID": "CVE-2024-7553",
|
||||
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-7553",
|
||||
"Impact": "None",
|
||||
"Public": "20240807"
|
||||
}
|
||||
],
|
||||
"AffectedCPEs": {
|
||||
"CPEs": [
|
||||
"cpe:/o:alt:spworkstation:10",
|
||||
"cpe:/o:alt:spserver:10"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:4001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411726001",
|
||||
"Comment": "mongo6.0-server-mongod is earlier than 0:6.0.17-alt0.c10.1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411726002",
|
||||
"Comment": "mongo6.0-server-mongos is earlier than 0:6.0.17-alt0.c10.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
40
oval/c10f1/ALT-PU-2024-11726/objects.json
Normal file
40
oval/c10f1/ALT-PU-2024-11726/objects.json
Normal file
@ -0,0 +1,40 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:4001",
|
||||
"Version": "1",
|
||||
"Comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"Datatype": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411726001",
|
||||
"Version": "1",
|
||||
"Comment": "mongo6.0-server-mongod is installed",
|
||||
"Name": "mongo6.0-server-mongod"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411726002",
|
||||
"Version": "1",
|
||||
"Comment": "mongo6.0-server-mongos is installed",
|
||||
"Name": "mongo6.0-server-mongos"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/c10f1/ALT-PU-2024-11726/states.json
Normal file
23
oval/c10f1/ALT-PU-2024-11726/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:4001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RPMInfoStates": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:202411726001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:6.0.17-alt0.c10.1",
|
||||
"Arch": {},
|
||||
"EVR": {
|
||||
"Text": "0:6.0.17-alt0.c10.1",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
42
oval/c10f1/ALT-PU-2024-11726/tests.json
Normal file
42
oval/c10f1/ALT-PU-2024-11726/tests.json
Normal file
@ -0,0 +1,42 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:4001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:4001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:4001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411726001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mongo6.0-server-mongod is earlier than 0:6.0.17-alt0.c10.1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411726001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411726001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411726002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "mongo6.0-server-mongos is earlier than 0:6.0.17-alt0.c10.1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411726002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411726001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
116
oval/c9f2/ALT-PU-2024-11507/definitions.json
Normal file
116
oval/c9f2/ALT-PU-2024-11507/definitions.json
Normal file
@ -0,0 +1,116 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:202411507",
|
||||
"Version": "oval:org.altlinux.errata:def:202411507",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-11507: package `speex` update to version 1.2.1-alt1",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch c9f2"
|
||||
],
|
||||
"Products": [
|
||||
"ALT SPWorkstation",
|
||||
"ALT SPServer"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-11507",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11507",
|
||||
"Source": "ALTPU"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2020-23903",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2020-23903",
|
||||
"Source": "CVE"
|
||||
},
|
||||
{
|
||||
"RefID": "CVE-2020-23904",
|
||||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2020-23904",
|
||||
"Source": "CVE"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades speex to version 1.2.1-alt1. \nSecurity Fix(es):\n\n * CVE-2020-23903: A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.\n\n * CVE-2020-23904: A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states \"I cannot reproduce it\" and it \"is a demo program.",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "Low",
|
||||
"Rights": "Copyright 2024 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-08-29"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-08-29"
|
||||
},
|
||||
"BDUs": null,
|
||||
"CVEs": [
|
||||
{
|
||||
"ID": "CVE-2020-23903",
|
||||
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
|
||||
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
|
||||
"CWE": "CWE-369",
|
||||
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2020-23903",
|
||||
"Impact": "Low",
|
||||
"Public": "20211110"
|
||||
},
|
||||
{
|
||||
"ID": "CVE-2020-23904",
|
||||
"CVSS": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
|
||||
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
|
||||
"CWE": "CWE-787",
|
||||
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2020-23904",
|
||||
"Impact": "Low",
|
||||
"Public": "20211110"
|
||||
}
|
||||
],
|
||||
"AffectedCPEs": {
|
||||
"CPEs": [
|
||||
"cpe:/o:alt:spworkstation:8.4",
|
||||
"cpe:/o:alt:spserver:8.4"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:3001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411507001",
|
||||
"Comment": "libspeex is earlier than 0:1.2.1-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411507002",
|
||||
"Comment": "libspeex-devel is earlier than 0:1.2.1-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411507003",
|
||||
"Comment": "libspeex-devel-doc is earlier than 0:1.2.1-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411507004",
|
||||
"Comment": "libspeex-devel-static is earlier than 0:1.2.1-alt1"
|
||||
},
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411507005",
|
||||
"Comment": "speex is earlier than 0:1.2.1-alt1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
58
oval/c9f2/ALT-PU-2024-11507/objects.json
Normal file
58
oval/c9f2/ALT-PU-2024-11507/objects.json
Normal file
@ -0,0 +1,58 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:3001",
|
||||
"Version": "1",
|
||||
"Comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"Datatype": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411507001",
|
||||
"Version": "1",
|
||||
"Comment": "libspeex is installed",
|
||||
"Name": "libspeex"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411507002",
|
||||
"Version": "1",
|
||||
"Comment": "libspeex-devel is installed",
|
||||
"Name": "libspeex-devel"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411507003",
|
||||
"Version": "1",
|
||||
"Comment": "libspeex-devel-doc is installed",
|
||||
"Name": "libspeex-devel-doc"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411507004",
|
||||
"Version": "1",
|
||||
"Comment": "libspeex-devel-static is installed",
|
||||
"Name": "libspeex-devel-static"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411507005",
|
||||
"Version": "1",
|
||||
"Comment": "speex is installed",
|
||||
"Name": "speex"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/c9f2/ALT-PU-2024-11507/states.json
Normal file
23
oval/c9f2/ALT-PU-2024-11507/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:3001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RPMInfoStates": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:202411507001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:1.2.1-alt1",
|
||||
"Arch": {},
|
||||
"EVR": {
|
||||
"Text": "0:1.2.1-alt1",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
78
oval/c9f2/ALT-PU-2024-11507/tests.json
Normal file
78
oval/c9f2/ALT-PU-2024-11507/tests.json
Normal file
@ -0,0 +1,78 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:3001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:3001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411507001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libspeex is earlier than 0:1.2.1-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411507001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411507001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411507002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libspeex-devel is earlier than 0:1.2.1-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411507002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411507001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411507003",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libspeex-devel-doc is earlier than 0:1.2.1-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411507003"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411507001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411507004",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libspeex-devel-static is earlier than 0:1.2.1-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411507004"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411507001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411507005",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "speex is earlier than 0:1.2.1-alt1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411507005"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411507001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
737
oval/c9f2/ALT-PU-2024-11520/definitions.json
Normal file
737
oval/c9f2/ALT-PU-2024-11520/definitions.json
Normal file
File diff suppressed because one or more lines are too long
58
oval/c9f2/ALT-PU-2024-11520/objects.json
Normal file
58
oval/c9f2/ALT-PU-2024-11520/objects.json
Normal file
@ -0,0 +1,58 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:3001",
|
||||
"Version": "1",
|
||||
"Comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"Datatype": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411520001",
|
||||
"Version": "1",
|
||||
"Comment": "MySQL-client is installed",
|
||||
"Name": "MySQL-client"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411520002",
|
||||
"Version": "1",
|
||||
"Comment": "MySQL-server is installed",
|
||||
"Name": "MySQL-server"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411520003",
|
||||
"Version": "1",
|
||||
"Comment": "MySQL-server-perl is installed",
|
||||
"Name": "MySQL-server-perl"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411520004",
|
||||
"Version": "1",
|
||||
"Comment": "libmysqlclient21 is installed",
|
||||
"Name": "libmysqlclient21"
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411520005",
|
||||
"Version": "1",
|
||||
"Comment": "libmysqlclient21-devel is installed",
|
||||
"Name": "libmysqlclient21-devel"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/c9f2/ALT-PU-2024-11520/states.json
Normal file
23
oval/c9f2/ALT-PU-2024-11520/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:3001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RPMInfoStates": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:202411520001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:8.0.37-alt1.0.c9f2.1",
|
||||
"Arch": {},
|
||||
"EVR": {
|
||||
"Text": "0:8.0.37-alt1.0.c9f2.1",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
78
oval/c9f2/ALT-PU-2024-11520/tests.json
Normal file
78
oval/c9f2/ALT-PU-2024-11520/tests.json
Normal file
@ -0,0 +1,78 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:3001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:3001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411520001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "MySQL-client is earlier than 0:8.0.37-alt1.0.c9f2.1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411520001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411520001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411520002",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "MySQL-server is earlier than 0:8.0.37-alt1.0.c9f2.1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411520002"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411520001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411520003",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "MySQL-server-perl is earlier than 0:8.0.37-alt1.0.c9f2.1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411520003"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411520001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411520004",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libmysqlclient21 is earlier than 0:8.0.37-alt1.0.c9f2.1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411520004"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411520001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411520005",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "libmysqlclient21-devel is earlier than 0:8.0.37-alt1.0.c9f2.1",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411520005"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411520001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
106
oval/p10/ALT-PU-2024-11353/definitions.json
Normal file
106
oval/p10/ALT-PU-2024-11353/definitions.json
Normal file
@ -0,0 +1,106 @@
|
||||
{
|
||||
"Definition": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:def:202411353",
|
||||
"Version": "oval:org.altlinux.errata:def:202411353",
|
||||
"Class": "patch",
|
||||
"Metadata": {
|
||||
"Title": "ALT-PU-2024-11353: package `kde5-plasma-addon-alt-weather` update to version 1.0.25-alt2",
|
||||
"AffectedList": [
|
||||
{
|
||||
"Family": "unix",
|
||||
"Platforms": [
|
||||
"ALT Linux branch p10"
|
||||
],
|
||||
"Products": [
|
||||
"ALT Server",
|
||||
"ALT Virtualization Server",
|
||||
"ALT Workstation",
|
||||
"ALT Workstation K",
|
||||
"ALT Education",
|
||||
"Simply Linux",
|
||||
"Starterkit"
|
||||
]
|
||||
}
|
||||
],
|
||||
"References": [
|
||||
{
|
||||
"RefID": "ALT-PU-2024-11353",
|
||||
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-11353",
|
||||
"Source": "ALTPU"
|
||||
}
|
||||
],
|
||||
"Description": "This update upgrades kde5-plasma-addon-alt-weather to version 1.0.25-alt2. \nSecurity Fix(es):\n\n * #49309: Показывает старую версию\n\n * #49632: Падения plasma после удаления виджета \"Прогноз погоды\"",
|
||||
"Advisory": {
|
||||
"From": "errata.altlinux.org",
|
||||
"Severity": "Low",
|
||||
"Rights": "Copyright 2024 BaseALT Ltd.",
|
||||
"Issued": {
|
||||
"Date": "2024-08-29"
|
||||
},
|
||||
"Updated": {
|
||||
"Date": "2024-08-29"
|
||||
},
|
||||
"BDUs": null,
|
||||
"Bugzilla": [
|
||||
{
|
||||
"ID": "49309",
|
||||
"Href": "https://bugzilla.altlinux.org/49309",
|
||||
"Data": "Показывает старую версию"
|
||||
},
|
||||
{
|
||||
"ID": "49632",
|
||||
"Href": "https://bugzilla.altlinux.org/49632",
|
||||
"Data": "Падения plasma после удаления виджета \"Прогноз погоды\""
|
||||
}
|
||||
],
|
||||
"AffectedCPEs": {
|
||||
"CPEs": [
|
||||
"cpe:/o:alt:kworkstation:10",
|
||||
"cpe:/o:alt:workstation:10",
|
||||
"cpe:/o:alt:server:10",
|
||||
"cpe:/o:alt:server-v:10",
|
||||
"cpe:/o:alt:education:10",
|
||||
"cpe:/o:alt:slinux:10",
|
||||
"cpe:/o:alt:starterkit:p10",
|
||||
"cpe:/o:alt:kworkstation:10.1",
|
||||
"cpe:/o:alt:workstation:10.1",
|
||||
"cpe:/o:alt:server:10.1",
|
||||
"cpe:/o:alt:server-v:10.1",
|
||||
"cpe:/o:alt:education:10.1",
|
||||
"cpe:/o:alt:slinux:10.1",
|
||||
"cpe:/o:alt:starterkit:10.1",
|
||||
"cpe:/o:alt:kworkstation:10.2",
|
||||
"cpe:/o:alt:workstation:10.2",
|
||||
"cpe:/o:alt:server:10.2",
|
||||
"cpe:/o:alt:server-v:10.2",
|
||||
"cpe:/o:alt:education:10.2",
|
||||
"cpe:/o:alt:slinux:10.2",
|
||||
"cpe:/o:alt:starterkit:10.2"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Criteria": {
|
||||
"Operator": "AND",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:2001",
|
||||
"Comment": "ALT Linux must be installed"
|
||||
}
|
||||
],
|
||||
"Criterias": [
|
||||
{
|
||||
"Operator": "OR",
|
||||
"Criterions": [
|
||||
{
|
||||
"TestRef": "oval:org.altlinux.errata:tst:202411353001",
|
||||
"Comment": "kde5-plasma-addon-alt-weather is earlier than 0:1.0.25-alt2"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
34
oval/p10/ALT-PU-2024-11353/objects.json
Normal file
34
oval/p10/ALT-PU-2024-11353/objects.json
Normal file
@ -0,0 +1,34 @@
|
||||
{
|
||||
"TextFileContent54Objects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:2001",
|
||||
"Version": "1",
|
||||
"Comment": "Evaluate `/etc/os-release` file content",
|
||||
"Path": {
|
||||
"Datatype": "string",
|
||||
"Text": "/etc"
|
||||
},
|
||||
"Filepath": {
|
||||
"Datatype": "string",
|
||||
"Text": "os-release"
|
||||
},
|
||||
"Pattern": {
|
||||
"Datatype": "string",
|
||||
"Operation": "pattern match",
|
||||
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
|
||||
},
|
||||
"Instance": {
|
||||
"Datatype": "int",
|
||||
"Text": "1"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoObjects": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:obj:202411353001",
|
||||
"Version": "1",
|
||||
"Comment": "kde5-plasma-addon-alt-weather is installed",
|
||||
"Name": "kde5-plasma-addon-alt-weather"
|
||||
}
|
||||
]
|
||||
}
|
23
oval/p10/ALT-PU-2024-11353/states.json
Normal file
23
oval/p10/ALT-PU-2024-11353/states.json
Normal file
@ -0,0 +1,23 @@
|
||||
{
|
||||
"TextFileContent54State": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:2001",
|
||||
"Version": "1",
|
||||
"Text": {}
|
||||
}
|
||||
],
|
||||
"RPMInfoStates": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:ste:202411353001",
|
||||
"Version": "1",
|
||||
"Comment": "package EVR is earlier than 0:1.0.25-alt2",
|
||||
"Arch": {},
|
||||
"EVR": {
|
||||
"Text": "0:1.0.25-alt2",
|
||||
"Datatype": "evr_string",
|
||||
"Operation": "less than"
|
||||
},
|
||||
"Subexpression": {}
|
||||
}
|
||||
]
|
||||
}
|
30
oval/p10/ALT-PU-2024-11353/tests.json
Normal file
30
oval/p10/ALT-PU-2024-11353/tests.json
Normal file
@ -0,0 +1,30 @@
|
||||
{
|
||||
"TextFileContent54Tests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:2001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "ALT Linux based on branch 'p10' must be installed",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:2001"
|
||||
}
|
||||
}
|
||||
],
|
||||
"RPMInfoTests": [
|
||||
{
|
||||
"ID": "oval:org.altlinux.errata:tst:202411353001",
|
||||
"Version": "1",
|
||||
"Check": "all",
|
||||
"Comment": "kde5-plasma-addon-alt-weather is earlier than 0:1.0.25-alt2",
|
||||
"Object": {
|
||||
"ObjectRef": "oval:org.altlinux.errata:obj:202411353001"
|
||||
},
|
||||
"State": {
|
||||
"StateRef": "oval:org.altlinux.errata:ste:202411353001"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
Loading…
x
Reference in New Issue
Block a user