pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2024-03-27 15:02:17 +00:00
parent b92aaed668
commit b883bbdc8b
19 changed files with 1590 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
oval/c10f1/ALT-PU-2024-4050/definitions.json
View File

@ -131,7 +131,7 @@
},
{
"Cvss3": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"Cwe": "CWE-787",
"Cwe": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-40547",
"Impact": "High",
"Public": "20240125",
@ -139,7 +139,7 @@
},
{
"Cvss3": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-190",
"Cwe": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-40548",
"Impact": "High",
"Public": "20240129",

4
oval/c10f2/ALT-PU-2024-4035/definitions.json
View File

@ -127,7 +127,7 @@
},
{
"Cvss3": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"Cwe": "CWE-787",
"Cwe": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-40547",
"Impact": "High",
"Public": "20240125",
@ -135,7 +135,7 @@
},
{
"Cvss3": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-190",
"Cwe": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-40548",
"Impact": "High",
"Public": "20240129",

228
oval/c10f2/ALT-PU-2024-4389/definitions.json Normal file
View File

@ -0,0 +1,228 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244389",
"Version": "oval:org.altlinux.errata:def:20244389",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4389: package `libvirt` update to version 9.7.0-alt2.p10.2",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f2"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4389",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4389",
"Source": "ALTPU"
},
{
"RefID": "CVE-2024-2494",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-2494",
"Source": "CVE"
}
],
"Description": "This update upgrades libvirt to version 9.7.0-alt2.p10.2. \nSecurity Fix(es):\n\n * CVE-2024-2494: A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-27"
},
"Updated": {
"Date": "2024-03-27"
},
"bdu": null,
"Cves": [
{
"Cwe": "CWE-789",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-2494",
"Impact": "None",
"Public": "20240321",
"CveID": "CVE-2024-2494"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244389001",
"Comment": "libvirt is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389002",
"Comment": "libvirt-admin is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389003",
"Comment": "libvirt-client is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389004",
"Comment": "libvirt-client-qemu is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389005",
"Comment": "libvirt-daemon is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389006",
"Comment": "libvirt-daemon-config-network is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389007",
"Comment": "libvirt-daemon-config-nwfilter is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389008",
"Comment": "libvirt-daemon-driver-interface is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389009",
"Comment": "libvirt-daemon-driver-lxc is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389010",
"Comment": "libvirt-daemon-driver-network is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389011",
"Comment": "libvirt-daemon-driver-nodedev is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389012",
"Comment": "libvirt-daemon-driver-nwfilter is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389013",
"Comment": "libvirt-daemon-driver-qemu is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389014",
"Comment": "libvirt-daemon-driver-secret is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389015",
"Comment": "libvirt-daemon-driver-storage is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389016",
"Comment": "libvirt-daemon-driver-storage-core is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389017",
"Comment": "libvirt-daemon-driver-storage-disk is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389018",
"Comment": "libvirt-daemon-driver-storage-fs is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389019",
"Comment": "libvirt-daemon-driver-storage-gluster is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389020",
"Comment": "libvirt-daemon-driver-storage-iscsi is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389021",
"Comment": "libvirt-daemon-driver-storage-iscsi-direct is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389022",
"Comment": "libvirt-daemon-driver-storage-logical is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389023",
"Comment": "libvirt-daemon-driver-storage-mpath is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389024",
"Comment": "libvirt-daemon-driver-storage-rbd is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389025",
"Comment": "libvirt-daemon-driver-storage-scsi is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389026",
"Comment": "libvirt-daemon-driver-storage-zfs is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389027",
"Comment": "libvirt-daemon-driver-vbox is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389028",
"Comment": "libvirt-devel is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389029",
"Comment": "libvirt-docs is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389030",
"Comment": "libvirt-kvm is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389031",
"Comment": "libvirt-libs is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389032",
"Comment": "libvirt-lock-sanlock is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389033",
"Comment": "libvirt-login-shell is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389034",
"Comment": "libvirt-lxc is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389035",
"Comment": "libvirt-qemu is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389036",
"Comment": "libvirt-qemu-common is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389037",
"Comment": "libvirt-vbox is earlier than 0:9.7.0-alt2.p10.2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244389038",
"Comment": "nss-libvirt is earlier than 0:9.7.0-alt2.p10.2"
}
]
}
]
}
}
]
}

256
oval/c10f2/ALT-PU-2024-4389/objects.json Normal file
View File

@ -0,0 +1,256 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244389001",
"Version": "1",
"comment": "libvirt is installed",
"Name": "libvirt"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389002",
"Version": "1",
"comment": "libvirt-admin is installed",
"Name": "libvirt-admin"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389003",
"Version": "1",
"comment": "libvirt-client is installed",
"Name": "libvirt-client"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389004",
"Version": "1",
"comment": "libvirt-client-qemu is installed",
"Name": "libvirt-client-qemu"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389005",
"Version": "1",
"comment": "libvirt-daemon is installed",
"Name": "libvirt-daemon"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389006",
"Version": "1",
"comment": "libvirt-daemon-config-network is installed",
"Name": "libvirt-daemon-config-network"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389007",
"Version": "1",
"comment": "libvirt-daemon-config-nwfilter is installed",
"Name": "libvirt-daemon-config-nwfilter"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389008",
"Version": "1",
"comment": "libvirt-daemon-driver-interface is installed",
"Name": "libvirt-daemon-driver-interface"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389009",
"Version": "1",
"comment": "libvirt-daemon-driver-lxc is installed",
"Name": "libvirt-daemon-driver-lxc"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389010",
"Version": "1",
"comment": "libvirt-daemon-driver-network is installed",
"Name": "libvirt-daemon-driver-network"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389011",
"Version": "1",
"comment": "libvirt-daemon-driver-nodedev is installed",
"Name": "libvirt-daemon-driver-nodedev"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389012",
"Version": "1",
"comment": "libvirt-daemon-driver-nwfilter is installed",
"Name": "libvirt-daemon-driver-nwfilter"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389013",
"Version": "1",
"comment": "libvirt-daemon-driver-qemu is installed",
"Name": "libvirt-daemon-driver-qemu"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389014",
"Version": "1",
"comment": "libvirt-daemon-driver-secret is installed",
"Name": "libvirt-daemon-driver-secret"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389015",
"Version": "1",
"comment": "libvirt-daemon-driver-storage is installed",
"Name": "libvirt-daemon-driver-storage"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389016",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-core is installed",
"Name": "libvirt-daemon-driver-storage-core"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389017",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-disk is installed",
"Name": "libvirt-daemon-driver-storage-disk"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389018",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-fs is installed",
"Name": "libvirt-daemon-driver-storage-fs"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389019",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-gluster is installed",
"Name": "libvirt-daemon-driver-storage-gluster"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389020",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-iscsi is installed",
"Name": "libvirt-daemon-driver-storage-iscsi"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389021",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-iscsi-direct is installed",
"Name": "libvirt-daemon-driver-storage-iscsi-direct"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389022",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-logical is installed",
"Name": "libvirt-daemon-driver-storage-logical"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389023",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-mpath is installed",
"Name": "libvirt-daemon-driver-storage-mpath"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389024",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-rbd is installed",
"Name": "libvirt-daemon-driver-storage-rbd"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389025",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-scsi is installed",
"Name": "libvirt-daemon-driver-storage-scsi"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389026",
"Version": "1",
"comment": "libvirt-daemon-driver-storage-zfs is installed",
"Name": "libvirt-daemon-driver-storage-zfs"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389027",
"Version": "1",
"comment": "libvirt-daemon-driver-vbox is installed",
"Name": "libvirt-daemon-driver-vbox"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389028",
"Version": "1",
"comment": "libvirt-devel is installed",
"Name": "libvirt-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389029",
"Version": "1",
"comment": "libvirt-docs is installed",
"Name": "libvirt-docs"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389030",
"Version": "1",
"comment": "libvirt-kvm is installed",
"Name": "libvirt-kvm"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389031",
"Version": "1",
"comment": "libvirt-libs is installed",
"Name": "libvirt-libs"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389032",
"Version": "1",
"comment": "libvirt-lock-sanlock is installed",
"Name": "libvirt-lock-sanlock"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389033",
"Version": "1",
"comment": "libvirt-login-shell is installed",
"Name": "libvirt-login-shell"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389034",
"Version": "1",
"comment": "libvirt-lxc is installed",
"Name": "libvirt-lxc"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389035",
"Version": "1",
"comment": "libvirt-qemu is installed",
"Name": "libvirt-qemu"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389036",
"Version": "1",
"comment": "libvirt-qemu-common is installed",
"Name": "libvirt-qemu-common"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389037",
"Version": "1",
"comment": "libvirt-vbox is installed",
"Name": "libvirt-vbox"
},
{
"ID": "oval:org.altlinux.errata:obj:20244389038",
"Version": "1",
"comment": "nss-libvirt is installed",
"Name": "nss-libvirt"
}
]
}

23
oval/c10f2/ALT-PU-2024-4389/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244389001",
"Version": "1",
"Comment": "package EVR is earlier than 0:9.7.0-alt2.p10.2",
"Arch": {},
"Evr": {
"Text": "0:9.7.0-alt2.p10.2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

474
oval/c10f2/ALT-PU-2024-4389/tests.json Normal file
View File

@ -0,0 +1,474 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244389001",
"Version": "1",
"Check": "all",
"Comment": "libvirt is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389002",
"Version": "1",
"Check": "all",
"Comment": "libvirt-admin is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389003",
"Version": "1",
"Check": "all",
"Comment": "libvirt-client is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389004",
"Version": "1",
"Check": "all",
"Comment": "libvirt-client-qemu is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389005",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389006",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-config-network is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389007",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-config-nwfilter is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389008",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-interface is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389009",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-lxc is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389010",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-network is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389011",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-nodedev is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389011"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389012",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-nwfilter is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389012"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389013",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-qemu is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389013"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389014",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-secret is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389014"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389015",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389015"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389016",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-core is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389016"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389017",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-disk is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389017"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389018",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-fs is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389018"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389019",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-gluster is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389019"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389020",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-iscsi is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389020"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389021",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-iscsi-direct is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389021"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389022",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-logical is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389022"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389023",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-mpath is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389023"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389024",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-rbd is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389024"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389025",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-scsi is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389025"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389026",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-storage-zfs is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389026"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389027",
"Version": "1",
"Check": "all",
"Comment": "libvirt-daemon-driver-vbox is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389027"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389028",
"Version": "1",
"Check": "all",
"Comment": "libvirt-devel is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389028"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389029",
"Version": "1",
"Check": "all",
"Comment": "libvirt-docs is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389029"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389030",
"Version": "1",
"Check": "all",
"Comment": "libvirt-kvm is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389030"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389031",
"Version": "1",
"Check": "all",
"Comment": "libvirt-libs is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389031"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389032",
"Version": "1",
"Check": "all",
"Comment": "libvirt-lock-sanlock is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389032"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389033",
"Version": "1",
"Check": "all",
"Comment": "libvirt-login-shell is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389033"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389034",
"Version": "1",
"Check": "all",
"Comment": "libvirt-lxc is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389034"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389035",
"Version": "1",
"Check": "all",
"Comment": "libvirt-qemu is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389035"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389036",
"Version": "1",
"Check": "all",
"Comment": "libvirt-qemu-common is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389036"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389037",
"Version": "1",
"Check": "all",
"Comment": "libvirt-vbox is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389037"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244389038",
"Version": "1",
"Check": "all",
"Comment": "nss-libvirt is earlier than 0:9.7.0-alt2.p10.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244389038"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244389001"
}
}
]
}

85
oval/c10f2/ALT-PU-2024-4474/definitions.json Normal file
View File

@ -0,0 +1,85 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244474",
"Version": "oval:org.altlinux.errata:def:20244474",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4474: package `rpm-build-vm` update to version 1.65-alt3",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f2"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4474",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4474",
"Source": "ALTPU"
}
],
"Description": "This update upgrades rpm-build-vm to version 1.65-alt3. \nSecurity Fix(es):\n\n * #47599: \"expected to fail\" tests fail on unsupported architecture",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-27"
},
"Updated": {
"Date": "2024-03-27"
},
"bdu": null,
"Bugzilla": [
{
"Id": "47599",
"Href": "https://bugzilla.altlinux.org/47599",
"Data": "\"expected to fail\" tests fail on unsupported architecture"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244474001",
"Comment": "rpm-build-vm is earlier than 0:1.65-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244474002",
"Comment": "rpm-build-vm-checkinstall is earlier than 0:1.65-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244474003",
"Comment": "rpm-build-vm-createimage is earlier than 0:1.65-alt3"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244474004",
"Comment": "rpm-build-vm-run is earlier than 0:1.65-alt3"
}
]
}
]
}
}
]
}

52
oval/c10f2/ALT-PU-2024-4474/objects.json Normal file
View File

@ -0,0 +1,52 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244474001",
"Version": "1",
"comment": "rpm-build-vm is installed",
"Name": "rpm-build-vm"
},
{
"ID": "oval:org.altlinux.errata:obj:20244474002",
"Version": "1",
"comment": "rpm-build-vm-checkinstall is installed",
"Name": "rpm-build-vm-checkinstall"
},
{
"ID": "oval:org.altlinux.errata:obj:20244474003",
"Version": "1",
"comment": "rpm-build-vm-createimage is installed",
"Name": "rpm-build-vm-createimage"
},
{
"ID": "oval:org.altlinux.errata:obj:20244474004",
"Version": "1",
"comment": "rpm-build-vm-run is installed",
"Name": "rpm-build-vm-run"
}
]
}

23
oval/c10f2/ALT-PU-2024-4474/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244474001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.65-alt3",
"Arch": {},
"Evr": {
"Text": "0:1.65-alt3",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

66
oval/c10f2/ALT-PU-2024-4474/tests.json Normal file
View File

@ -0,0 +1,66 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244474001",
"Version": "1",
"Check": "all",
"Comment": "rpm-build-vm is earlier than 0:1.65-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244474001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244474001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244474002",
"Version": "1",
"Check": "all",
"Comment": "rpm-build-vm-checkinstall is earlier than 0:1.65-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244474002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244474001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244474003",
"Version": "1",
"Check": "all",
"Comment": "rpm-build-vm-createimage is earlier than 0:1.65-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244474003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244474001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244474004",
"Version": "1",
"Check": "all",
"Comment": "rpm-build-vm-run is earlier than 0:1.65-alt3",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244474004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244474001"
}
}
]
}

77
oval/c10f2/ALT-PU-2024-4476/definitions.json Normal file
View File

@ -0,0 +1,77 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244476",
"Version": "oval:org.altlinux.errata:def:20244476",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4476: package `openssl-gost-engine` update to version 1.1.0.3.0.255.ge3af41d.p1-alt5",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f2"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4476",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4476",
"Source": "ALTPU"
}
],
"Description": "This update upgrades openssl-gost-engine to version 1.1.0.3.0.255.ge3af41d.p1-alt5. \nSecurity Fix(es):\n\n * #39310: control openssl-gost disabled не удаляет пустую строку в конфиге",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-27"
},
"Updated": {
"Date": "2024-03-27"
},
"bdu": null,
"Bugzilla": [
{
"Id": "39310",
"Href": "https://bugzilla.altlinux.org/39310",
"Data": "control openssl-gost disabled не удаляет пустую строку в конфиге"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244476001",
"Comment": "gostsum is earlier than 0:1.1.0.3.0.255.ge3af41d.p1-alt5"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244476002",
"Comment": "openssl-gost-engine is earlier than 0:1.1.0.3.0.255.ge3af41d.p1-alt5"
}
]
}
]
}
}
]
}

40
oval/c10f2/ALT-PU-2024-4476/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244476001",
"Version": "1",
"comment": "gostsum is installed",
"Name": "gostsum"
},
{
"ID": "oval:org.altlinux.errata:obj:20244476002",
"Version": "1",
"comment": "openssl-gost-engine is installed",
"Name": "openssl-gost-engine"
}
]
}

23
oval/c10f2/ALT-PU-2024-4476/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244476001",
"Version": "1",
"Comment": "package EVR is earlier than 0:1.1.0.3.0.255.ge3af41d.p1-alt5",
"Arch": {},
"Evr": {
"Text": "0:1.1.0.3.0.255.ge3af41d.p1-alt5",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c10f2/ALT-PU-2024-4476/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244476001",
"Version": "1",
"Check": "all",
"Comment": "gostsum is earlier than 0:1.1.0.3.0.255.ge3af41d.p1-alt5",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244476001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244476001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244476002",
"Version": "1",
"Check": "all",
"Comment": "openssl-gost-engine is earlier than 0:1.1.0.3.0.255.ge3af41d.p1-alt5",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244476002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244476001"
}
}
]
}

4
oval/c9f2/ALT-PU-2024-1869/definitions.json
View File

@ -131,7 +131,7 @@
},
{
"Cvss3": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"Cwe": "CWE-787",
"Cwe": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-40547",
"Impact": "High",
"Public": "20240125",
@ -139,7 +139,7 @@
},
{
"Cvss3": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-190",
"Cwe": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-40548",
"Impact": "High",
"Public": "20240129",

90
oval/c9f2/ALT-PU-2024-4379/definitions.json Normal file
View File

@ -0,0 +1,90 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244379",
"Version": "oval:org.altlinux.errata:def:20244379",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4379: package `openblas` update to version 0.3.26-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4379",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4379",
"Source": "ALTPU"
},
{
"RefID": "CVE-2021-4048",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-4048",
"Source": "CVE"
}
],
"Description": "This update upgrades openblas to version 0.3.26-alt1. \nSecurity Fix(es):\n\n * CVE-2021-4048: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Critical",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-27"
},
"Updated": {
"Date": "2024-03-27"
},
"bdu": null,
"Cves": [
{
"Cvss": "AV:N/AC:L/Au:N/C:P/I:N/A:P",
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"Cwe": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-4048",
"Impact": "Critical",
"Public": "20211208",
"CveID": "CVE-2021-4048"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244379001",
"Comment": "libopenblas is earlier than 0:0.3.26-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244379002",
"Comment": "libopenblas-devel is earlier than 0:0.3.26-alt1"
}
]
}
]
}
}
]
}

40
oval/c9f2/ALT-PU-2024-4379/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244379001",
"Version": "1",
"comment": "libopenblas is installed",
"Name": "libopenblas"
},
{
"ID": "oval:org.altlinux.errata:obj:20244379002",
"Version": "1",
"comment": "libopenblas-devel is installed",
"Name": "libopenblas-devel"
}
]
}

23
oval/c9f2/ALT-PU-2024-4379/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244379001",
"Version": "1",
"Comment": "package EVR is earlier than 0:0.3.26-alt1",
"Arch": {},
"Evr": {
"Text": "0:0.3.26-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c9f2/ALT-PU-2024-4379/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244379001",
"Version": "1",
"Check": "all",
"Comment": "libopenblas is earlier than 0:0.3.26-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244379001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244379001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244379002",
"Version": "1",
"Check": "all",
"Comment": "libopenblas-devel is earlier than 0:0.3.26-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244379002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244379001"
}
}
]
}