pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2024-11-20 03:05:12 +00:00
parent dbf662323e
commit bcfac1db3c
25 changed files with 4817 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

707
oval/c10f1/ALT-PU-2024-15575/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

34
oval/c10f1/ALT-PU-2024-15575/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:4001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202415575001",
"Version": "1",
"Comment": "yandex-browser-stable is installed",
"Name": "yandex-browser-stable"
}
]
}

23
oval/c10f1/ALT-PU-2024-15575/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:4001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202415575001",
"Version": "1",
"Comment": "package EVR is earlier than 0:24.7.6.1018-alt1",
"Arch": {},
"EVR": {
"Text": "0:24.7.6.1018-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/c10f1/ALT-PU-2024-15575/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:4001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:4001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:4001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202415575001",
"Version": "1",
"Check": "all",
"Comment": "yandex-browser-stable is earlier than 0:24.7.6.1018-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415575001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415575001"
}
}
]
}

14
oval/c9f2/ALT-PU-2024-12541/definitions.json
View File

File diff suppressed because one or more lines are too long

1937
oval/c9f2/ALT-PU-2024-15739/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

94
oval/c9f2/ALT-PU-2024-15739/objects.json Normal file
View File

@ -0,0 +1,94 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202415739001",
"Version": "1",
"Comment": "kernel-doc-std is installed",
"Name": "kernel-doc-std"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739002",
"Version": "1",
"Comment": "kernel-headers-modules-std-def is installed",
"Name": "kernel-headers-modules-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739003",
"Version": "1",
"Comment": "kernel-headers-std-def is installed",
"Name": "kernel-headers-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739004",
"Version": "1",
"Comment": "kernel-image-domU-std-def is installed",
"Name": "kernel-image-domU-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739005",
"Version": "1",
"Comment": "kernel-image-std-def is installed",
"Name": "kernel-image-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739006",
"Version": "1",
"Comment": "kernel-modules-drm-ancient-std-def is installed",
"Name": "kernel-modules-drm-ancient-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739007",
"Version": "1",
"Comment": "kernel-modules-drm-nouveau-std-def is installed",
"Name": "kernel-modules-drm-nouveau-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739008",
"Version": "1",
"Comment": "kernel-modules-drm-std-def is installed",
"Name": "kernel-modules-drm-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739009",
"Version": "1",
"Comment": "kernel-modules-ide-std-def is installed",
"Name": "kernel-modules-ide-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739010",
"Version": "1",
"Comment": "kernel-modules-midgard-be-m1000-std-def is installed",
"Name": "kernel-modules-midgard-be-m1000-std-def"
},
{
"ID": "oval:org.altlinux.errata:obj:202415739011",
"Version": "1",
"Comment": "kernel-modules-staging-std-def is installed",
"Name": "kernel-modules-staging-std-def"
}
]
}

23
oval/c9f2/ALT-PU-2024-15739/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202415739001",
"Version": "1",
"Comment": "package EVR is earlier than 2:5.10.230-alt0.c9f.2",
"Arch": {},
"EVR": {
"Text": "2:5.10.230-alt0.c9f.2",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

150
oval/c9f2/ALT-PU-2024-15739/tests.json Normal file
View File

@ -0,0 +1,150 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202415739001",
"Version": "1",
"Check": "all",
"Comment": "kernel-doc-std is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739002",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-modules-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739003",
"Version": "1",
"Check": "all",
"Comment": "kernel-headers-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739004",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-domU-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739005",
"Version": "1",
"Check": "all",
"Comment": "kernel-image-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739006",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-ancient-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739007",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-nouveau-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739008",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-drm-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739009",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-ide-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739010",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-midgard-be-m1000-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415739011",
"Version": "1",
"Check": "all",
"Comment": "kernel-modules-staging-std-def is earlier than 2:5.10.230-alt0.c9f.2",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415739011"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415739001"
}
}
]
}

151
oval/c9f2/ALT-PU-2024-15751/definitions.json Normal file
View File

@ -0,0 +1,151 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202415751",
"Version": "oval:org.altlinux.errata:def:202415751",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-15751: package `clamav` update to version 0.103.12-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-15751",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-15751",
"Source": "ALTPU"
},
{
"RefID": "BDU:2024-06743",
"RefURL": "https://bdu.fstec.ru/vul/2024-06743",
"Source": "BDU"
},
{
"RefID": "BDU:2024-07098",
"RefURL": "https://bdu.fstec.ru/vul/2024-07098",
"Source": "BDU"
},
{
"RefID": "CVE-2024-20505",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-20505",
"Source": "CVE"
},
{
"RefID": "CVE-2024-20506",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-20506",
"Source": "CVE"
}
],
"Description": "This update upgrades clamav to version 0.103.12-alt1. \nSecurity Fix(es):\n\n * BDU:2024-06743: Уязвимость компонента анализа pdf-файлов пакета антивирусных программ ClamAV, позволяющая нарушителю вызвать отказ в обслуживании\n\n * BDU:2024-07098: Уязвимость службы ClamD пакета антивирусных программ ClamAV, позволяющая нарушителю нарушить целостность системных файлов или вызвать отказ в обслуживании\n\n * CVE-2024-20505: A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\n\nThe vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.\n\n * CVE-2024-20506: A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt critical system files.\n\nThe vulnerability is due to allowing the ClamD process to write to its log file while privileged without checking if the logfile has been replaced with a symbolic link. An attacker could exploit this vulnerability if they replace the ClamD log file with a symlink to a critical system file and then find a way to restart the ClamD process. An exploit could allow the attacker to corrupt a critical system file by appending ClamD log messages after restart.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-11-19"
},
"Updated": {
"Date": "2024-11-19"
},
"BDUs": [
{
"ID": "BDU:2024-06743",
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-125",
"Href": "https://bdu.fstec.ru/vul/2024-06743",
"Impact": "High",
"Public": "20240904"
},
{
"ID": "BDU:2024-07098",
"CVSS": "AV:L/AC:L/Au:S/C:N/I:P/A:C",
"CVSS3": "AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"CWE": "CWE-754",
"Href": "https://bdu.fstec.ru/vul/2024-07098",
"Impact": "Low",
"Public": "20240904"
}
],
"CVEs": [
{
"ID": "CVE-2024-20505",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-20505",
"Impact": "High",
"Public": "20240904"
},
{
"ID": "CVE-2024-20506",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"CWE": "CWE-754",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-20506",
"Impact": "Low",
"Public": "20240904"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202415751001",
"Comment": "clamav is earlier than 0:0.103.12-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415751002",
"Comment": "clamav-clamonacc is earlier than 0:0.103.12-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415751003",
"Comment": "clamav-freshclam is earlier than 0:0.103.12-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415751004",
"Comment": "clamav-manual is earlier than 0:0.103.12-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415751005",
"Comment": "clamav-milter is earlier than 0:0.103.12-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415751006",
"Comment": "libclamav-devel is earlier than 0:0.103.12-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415751007",
"Comment": "libclamav9 is earlier than 0:0.103.12-alt1"
}
]
}
]
}
}
]
}

70
oval/c9f2/ALT-PU-2024-15751/objects.json Normal file
View File

@ -0,0 +1,70 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202415751001",
"Version": "1",
"Comment": "clamav is installed",
"Name": "clamav"
},
{
"ID": "oval:org.altlinux.errata:obj:202415751002",
"Version": "1",
"Comment": "clamav-clamonacc is installed",
"Name": "clamav-clamonacc"
},
{
"ID": "oval:org.altlinux.errata:obj:202415751003",
"Version": "1",
"Comment": "clamav-freshclam is installed",
"Name": "clamav-freshclam"
},
{
"ID": "oval:org.altlinux.errata:obj:202415751004",
"Version": "1",
"Comment": "clamav-manual is installed",
"Name": "clamav-manual"
},
{
"ID": "oval:org.altlinux.errata:obj:202415751005",
"Version": "1",
"Comment": "clamav-milter is installed",
"Name": "clamav-milter"
},
{
"ID": "oval:org.altlinux.errata:obj:202415751006",
"Version": "1",
"Comment": "libclamav-devel is installed",
"Name": "libclamav-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202415751007",
"Version": "1",
"Comment": "libclamav9 is installed",
"Name": "libclamav9"
}
]
}

23
oval/c9f2/ALT-PU-2024-15751/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202415751001",
"Version": "1",
"Comment": "package EVR is earlier than 0:0.103.12-alt1",
"Arch": {},
"EVR": {
"Text": "0:0.103.12-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

102
oval/c9f2/ALT-PU-2024-15751/tests.json Normal file
View File

@ -0,0 +1,102 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202415751001",
"Version": "1",
"Check": "all",
"Comment": "clamav is earlier than 0:0.103.12-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415751001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415751001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415751002",
"Version": "1",
"Check": "all",
"Comment": "clamav-clamonacc is earlier than 0:0.103.12-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415751002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415751001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415751003",
"Version": "1",
"Check": "all",
"Comment": "clamav-freshclam is earlier than 0:0.103.12-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415751003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415751001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415751004",
"Version": "1",
"Check": "all",
"Comment": "clamav-manual is earlier than 0:0.103.12-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415751004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415751001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415751005",
"Version": "1",
"Check": "all",
"Comment": "clamav-milter is earlier than 0:0.103.12-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415751005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415751001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415751006",
"Version": "1",
"Check": "all",
"Comment": "libclamav-devel is earlier than 0:0.103.12-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415751006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415751001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415751007",
"Version": "1",
"Check": "all",
"Comment": "libclamav9 is earlier than 0:0.103.12-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415751007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415751001"
}
}
]
}

100
oval/c9f2/ALT-PU-2024-15770/definitions.json Normal file
View File

@ -0,0 +1,100 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202415770",
"Version": "oval:org.altlinux.errata:def:202415770",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-15770: package `tcpdump` update to version 4.99.4-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c9f2"
],
"Products": [
"ALT SPWorkstation",
"ALT SPServer"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-15770",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-15770",
"Source": "ALTPU"
},
{
"RefID": "CVE-2018-16301",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-16301",
"Source": "CVE"
},
{
"RefID": "CVE-2020-8037",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2020-8037",
"Source": "CVE"
}
],
"Description": "This update upgrades tcpdump to version 4.99.4-alt1. \nSecurity Fix(es):\n\n * CVE-2018-16301: The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump.\n\n * CVE-2020-8037: The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-11-19"
},
"Updated": {
"Date": "2024-11-19"
},
"BDUs": null,
"CVEs": [
{
"ID": "CVE-2018-16301",
"CVSS": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"CVSS3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CWE": "CWE-120",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-16301",
"Impact": "High",
"Public": "20191003"
},
{
"ID": "CVE-2020-8037",
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CWE": "CWE-770",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2020-8037",
"Impact": "High",
"Public": "20201104"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:spworkstation:8.4",
"cpe:/o:alt:spserver:8.4"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:3001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202415770001",
"Comment": "tcpdump is earlier than 1:4.99.4-alt1"
}
]
}
]
}
}
]
}

34
oval/c9f2/ALT-PU-2024-15770/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202415770001",
"Version": "1",
"Comment": "tcpdump is installed",
"Name": "tcpdump"
}
]
}

23
oval/c9f2/ALT-PU-2024-15770/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202415770001",
"Version": "1",
"Comment": "package EVR is earlier than 1:4.99.4-alt1",
"Arch": {},
"EVR": {
"Text": "1:4.99.4-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/c9f2/ALT-PU-2024-15770/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202415770001",
"Version": "1",
"Check": "all",
"Comment": "tcpdump is earlier than 1:4.99.4-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415770001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415770001"
}
}
]
}

284
oval/p10/ALT-PU-2024-15421/definitions.json Normal file
View File

@ -0,0 +1,284 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202415421",
"Version": "oval:org.altlinux.errata:def:202415421",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-15421: package `erlang` update to version 26.2.5.3-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-15421",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-15421",
"Source": "ALTPU"
},
{
"RefID": "BDU:2023-08853",
"RefURL": "https://bdu.fstec.ru/vul/2023-08853",
"Source": "BDU"
},
{
"RefID": "CVE-2023-48795",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-48795",
"Source": "CVE"
}
],
"Description": "This update upgrades erlang to version 26.2.5.3-alt1. \nSecurity Fix(es):\n\n * BDU:2023-08853: Уязвимость реализации протокола SSH, связанная с возможностью откорректировать порядковые номера пакетов в процессе согласования соединения и добиться удаления произвольного числа служебных SSH-сообщений, позволяющая нарушителю обойти проверки целостности, отключить существующие функции безопасности, получить несанкционированный доступ к защищаемой информации\n\n * CVE-2023-48795: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "High",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-11-19"
},
"Updated": {
"Date": "2024-11-19"
},
"BDUs": [
{
"ID": "BDU:2023-08853",
"CVSS": "AV:N/AC:H/Au:N/C:C/I:C/A:N",
"CVSS3": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"CWE": "CWE-222",
"Href": "https://bdu.fstec.ru/vul/2023-08853",
"Impact": "High",
"Public": "20231218"
}
],
"CVEs": [
{
"ID": "CVE-2023-48795",
"CVSS3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"CWE": "CWE-354",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-48795",
"Impact": "Low",
"Public": "20231218"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202415421001",
"Comment": "erlang is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421002",
"Comment": "erlang-common_test is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421003",
"Comment": "erlang-common_test-bin is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421004",
"Comment": "erlang-common_test-common is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421005",
"Comment": "erlang-common_test-debug is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421006",
"Comment": "erlang-common_test-devel is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421007",
"Comment": "erlang-common_test-native is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421008",
"Comment": "erlang-devel is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421009",
"Comment": "erlang-doc is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421010",
"Comment": "erlang-doc-chunks is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421011",
"Comment": "erlang-doc-html is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421012",
"Comment": "erlang-doc-pdf is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421013",
"Comment": "erlang-emacs is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421014",
"Comment": "erlang-examples is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421015",
"Comment": "erlang-full is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421016",
"Comment": "erlang-jinterface is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421017",
"Comment": "erlang-jinterface-debug is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421018",
"Comment": "erlang-jinterface-native is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421019",
"Comment": "erlang-man is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421020",
"Comment": "erlang-megaco is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421021",
"Comment": "erlang-megaco-debug is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421022",
"Comment": "erlang-megaco-devel is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421023",
"Comment": "erlang-megaco-drivers is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421024",
"Comment": "erlang-megaco-native is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421025",
"Comment": "erlang-odbc is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421026",
"Comment": "erlang-odbc-debug is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421027",
"Comment": "erlang-odbc-devel is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421028",
"Comment": "erlang-odbc-native is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421029",
"Comment": "erlang-odbc-server is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421030",
"Comment": "erlang-otp is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421031",
"Comment": "erlang-otp-bin is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421032",
"Comment": "erlang-otp-common is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421033",
"Comment": "erlang-otp-debug is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421034",
"Comment": "erlang-otp-devel is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421035",
"Comment": "erlang-otp-full is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421036",
"Comment": "erlang-otp-native is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421037",
"Comment": "erlang-visual is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421038",
"Comment": "erlang-visual-common is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421039",
"Comment": "erlang-visual-debug is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421040",
"Comment": "erlang-visual-devel is earlier than 1:26.2.5.3-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:202415421041",
"Comment": "erlang-visual-native is earlier than 1:26.2.5.3-alt1"
}
]
}
]
}
}
]
}

274
oval/p10/ALT-PU-2024-15421/objects.json Normal file
View File

@ -0,0 +1,274 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202415421001",
"Version": "1",
"Comment": "erlang is installed",
"Name": "erlang"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421002",
"Version": "1",
"Comment": "erlang-common_test is installed",
"Name": "erlang-common_test"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421003",
"Version": "1",
"Comment": "erlang-common_test-bin is installed",
"Name": "erlang-common_test-bin"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421004",
"Version": "1",
"Comment": "erlang-common_test-common is installed",
"Name": "erlang-common_test-common"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421005",
"Version": "1",
"Comment": "erlang-common_test-debug is installed",
"Name": "erlang-common_test-debug"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421006",
"Version": "1",
"Comment": "erlang-common_test-devel is installed",
"Name": "erlang-common_test-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421007",
"Version": "1",
"Comment": "erlang-common_test-native is installed",
"Name": "erlang-common_test-native"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421008",
"Version": "1",
"Comment": "erlang-devel is installed",
"Name": "erlang-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421009",
"Version": "1",
"Comment": "erlang-doc is installed",
"Name": "erlang-doc"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421010",
"Version": "1",
"Comment": "erlang-doc-chunks is installed",
"Name": "erlang-doc-chunks"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421011",
"Version": "1",
"Comment": "erlang-doc-html is installed",
"Name": "erlang-doc-html"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421012",
"Version": "1",
"Comment": "erlang-doc-pdf is installed",
"Name": "erlang-doc-pdf"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421013",
"Version": "1",
"Comment": "erlang-emacs is installed",
"Name": "erlang-emacs"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421014",
"Version": "1",
"Comment": "erlang-examples is installed",
"Name": "erlang-examples"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421015",
"Version": "1",
"Comment": "erlang-full is installed",
"Name": "erlang-full"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421016",
"Version": "1",
"Comment": "erlang-jinterface is installed",
"Name": "erlang-jinterface"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421017",
"Version": "1",
"Comment": "erlang-jinterface-debug is installed",
"Name": "erlang-jinterface-debug"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421018",
"Version": "1",
"Comment": "erlang-jinterface-native is installed",
"Name": "erlang-jinterface-native"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421019",
"Version": "1",
"Comment": "erlang-man is installed",
"Name": "erlang-man"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421020",
"Version": "1",
"Comment": "erlang-megaco is installed",
"Name": "erlang-megaco"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421021",
"Version": "1",
"Comment": "erlang-megaco-debug is installed",
"Name": "erlang-megaco-debug"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421022",
"Version": "1",
"Comment": "erlang-megaco-devel is installed",
"Name": "erlang-megaco-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421023",
"Version": "1",
"Comment": "erlang-megaco-drivers is installed",
"Name": "erlang-megaco-drivers"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421024",
"Version": "1",
"Comment": "erlang-megaco-native is installed",
"Name": "erlang-megaco-native"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421025",
"Version": "1",
"Comment": "erlang-odbc is installed",
"Name": "erlang-odbc"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421026",
"Version": "1",
"Comment": "erlang-odbc-debug is installed",
"Name": "erlang-odbc-debug"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421027",
"Version": "1",
"Comment": "erlang-odbc-devel is installed",
"Name": "erlang-odbc-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421028",
"Version": "1",
"Comment": "erlang-odbc-native is installed",
"Name": "erlang-odbc-native"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421029",
"Version": "1",
"Comment": "erlang-odbc-server is installed",
"Name": "erlang-odbc-server"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421030",
"Version": "1",
"Comment": "erlang-otp is installed",
"Name": "erlang-otp"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421031",
"Version": "1",
"Comment": "erlang-otp-bin is installed",
"Name": "erlang-otp-bin"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421032",
"Version": "1",
"Comment": "erlang-otp-common is installed",
"Name": "erlang-otp-common"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421033",
"Version": "1",
"Comment": "erlang-otp-debug is installed",
"Name": "erlang-otp-debug"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421034",
"Version": "1",
"Comment": "erlang-otp-devel is installed",
"Name": "erlang-otp-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421035",
"Version": "1",
"Comment": "erlang-otp-full is installed",
"Name": "erlang-otp-full"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421036",
"Version": "1",
"Comment": "erlang-otp-native is installed",
"Name": "erlang-otp-native"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421037",
"Version": "1",
"Comment": "erlang-visual is installed",
"Name": "erlang-visual"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421038",
"Version": "1",
"Comment": "erlang-visual-common is installed",
"Name": "erlang-visual-common"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421039",
"Version": "1",
"Comment": "erlang-visual-debug is installed",
"Name": "erlang-visual-debug"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421040",
"Version": "1",
"Comment": "erlang-visual-devel is installed",
"Name": "erlang-visual-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:202415421041",
"Version": "1",
"Comment": "erlang-visual-native is installed",
"Name": "erlang-visual-native"
}
]
}

23
oval/p10/ALT-PU-2024-15421/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202415421001",
"Version": "1",
"Comment": "package EVR is earlier than 1:26.2.5.3-alt1",
"Arch": {},
"EVR": {
"Text": "1:26.2.5.3-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

510
oval/p10/ALT-PU-2024-15421/tests.json Normal file
View File

@ -0,0 +1,510 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202415421001",
"Version": "1",
"Check": "all",
"Comment": "erlang is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421002",
"Version": "1",
"Check": "all",
"Comment": "erlang-common_test is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421003",
"Version": "1",
"Check": "all",
"Comment": "erlang-common_test-bin is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421004",
"Version": "1",
"Check": "all",
"Comment": "erlang-common_test-common is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421005",
"Version": "1",
"Check": "all",
"Comment": "erlang-common_test-debug is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421006",
"Version": "1",
"Check": "all",
"Comment": "erlang-common_test-devel is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421007",
"Version": "1",
"Check": "all",
"Comment": "erlang-common_test-native is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421008",
"Version": "1",
"Check": "all",
"Comment": "erlang-devel is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421008"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421009",
"Version": "1",
"Check": "all",
"Comment": "erlang-doc is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421009"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421010",
"Version": "1",
"Check": "all",
"Comment": "erlang-doc-chunks is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421010"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421011",
"Version": "1",
"Check": "all",
"Comment": "erlang-doc-html is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421011"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421012",
"Version": "1",
"Check": "all",
"Comment": "erlang-doc-pdf is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421012"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421013",
"Version": "1",
"Check": "all",
"Comment": "erlang-emacs is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421013"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421014",
"Version": "1",
"Check": "all",
"Comment": "erlang-examples is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421014"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421015",
"Version": "1",
"Check": "all",
"Comment": "erlang-full is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421015"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421016",
"Version": "1",
"Check": "all",
"Comment": "erlang-jinterface is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421016"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421017",
"Version": "1",
"Check": "all",
"Comment": "erlang-jinterface-debug is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421017"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421018",
"Version": "1",
"Check": "all",
"Comment": "erlang-jinterface-native is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421018"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421019",
"Version": "1",
"Check": "all",
"Comment": "erlang-man is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421019"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421020",
"Version": "1",
"Check": "all",
"Comment": "erlang-megaco is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421020"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421021",
"Version": "1",
"Check": "all",
"Comment": "erlang-megaco-debug is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421021"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421022",
"Version": "1",
"Check": "all",
"Comment": "erlang-megaco-devel is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421022"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421023",
"Version": "1",
"Check": "all",
"Comment": "erlang-megaco-drivers is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421023"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421024",
"Version": "1",
"Check": "all",
"Comment": "erlang-megaco-native is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421024"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421025",
"Version": "1",
"Check": "all",
"Comment": "erlang-odbc is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421025"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421026",
"Version": "1",
"Check": "all",
"Comment": "erlang-odbc-debug is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421026"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421027",
"Version": "1",
"Check": "all",
"Comment": "erlang-odbc-devel is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421027"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421028",
"Version": "1",
"Check": "all",
"Comment": "erlang-odbc-native is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421028"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421029",
"Version": "1",
"Check": "all",
"Comment": "erlang-odbc-server is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421029"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421030",
"Version": "1",
"Check": "all",
"Comment": "erlang-otp is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421030"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421031",
"Version": "1",
"Check": "all",
"Comment": "erlang-otp-bin is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421031"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421032",
"Version": "1",
"Check": "all",
"Comment": "erlang-otp-common is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421032"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421033",
"Version": "1",
"Check": "all",
"Comment": "erlang-otp-debug is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421033"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421034",
"Version": "1",
"Check": "all",
"Comment": "erlang-otp-devel is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421034"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421035",
"Version": "1",
"Check": "all",
"Comment": "erlang-otp-full is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421035"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421036",
"Version": "1",
"Check": "all",
"Comment": "erlang-otp-native is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421036"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421037",
"Version": "1",
"Check": "all",
"Comment": "erlang-visual is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421037"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421038",
"Version": "1",
"Check": "all",
"Comment": "erlang-visual-common is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421038"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421039",
"Version": "1",
"Check": "all",
"Comment": "erlang-visual-debug is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421039"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421040",
"Version": "1",
"Check": "all",
"Comment": "erlang-visual-devel is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421040"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:202415421041",
"Version": "1",
"Check": "all",
"Comment": "erlang-visual-native is earlier than 1:26.2.5.3-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415421041"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415421001"
}
}
]
}

101
oval/p10/ALT-PU-2024-15423/definitions.json Normal file
View File

@ -0,0 +1,101 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:202415423",
"Version": "oval:org.altlinux.errata:def:202415423",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-15423: package `ejabberd` update to version 21.12-alt4",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch p10"
],
"Products": [
"ALT Server",
"ALT Virtualization Server",
"ALT Workstation",
"ALT Workstation K",
"ALT Education",
"Simply Linux",
"Starterkit"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-15423",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-15423",
"Source": "ALTPU"
}
],
"Description": "This update upgrades ejabberd to version 21.12-alt4. \nSecurity Fix(es):\n\n * #51259: Не запускается ejabberd.service",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-11-19"
},
"Updated": {
"Date": "2024-11-19"
},
"BDUs": null,
"Bugzilla": [
{
"ID": "51259",
"Href": "https://bugzilla.altlinux.org/51259",
"Data": "Не запускается ejabberd.service"
}
],
"AffectedCPEs": {
"CPEs": [
"cpe:/o:alt:kworkstation:10",
"cpe:/o:alt:workstation:10",
"cpe:/o:alt:server:10",
"cpe:/o:alt:server-v:10",
"cpe:/o:alt:education:10",
"cpe:/o:alt:slinux:10",
"cpe:/o:alt:starterkit:p10",
"cpe:/o:alt:kworkstation:10.1",
"cpe:/o:alt:workstation:10.1",
"cpe:/o:alt:server:10.1",
"cpe:/o:alt:server-v:10.1",
"cpe:/o:alt:education:10.1",
"cpe:/o:alt:slinux:10.1",
"cpe:/o:alt:starterkit:10.1",
"cpe:/o:alt:kworkstation:10.2",
"cpe:/o:alt:workstation:10.2",
"cpe:/o:alt:server:10.2",
"cpe:/o:alt:server-v:10.2",
"cpe:/o:alt:education:10.2",
"cpe:/o:alt:slinux:10.2",
"cpe:/o:alt:starterkit:10.2"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:2001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:202415423001",
"Comment": "ejabberd is earlier than 0:21.12-alt4"
}
]
}
]
}
}
]
}

34
oval/p10/ALT-PU-2024-15423/objects.json Normal file
View File

@ -0,0 +1,34 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:2001",
"Version": "1",
"Comment": "Evaluate `/etc/os-release` file content",
"Path": {
"Datatype": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:(?!sp)[a-z\\-]+:p?(\\d+)(?:\\.\\d)*"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RPMInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:202415423001",
"Version": "1",
"Comment": "ejabberd is installed",
"Name": "ejabberd"
}
]
}

23
oval/p10/ALT-PU-2024-15423/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:2001",
"Version": "1",
"Text": {}
}
],
"RPMInfoStates": [
{
"ID": "oval:org.altlinux.errata:ste:202415423001",
"Version": "1",
"Comment": "package EVR is earlier than 0:21.12-alt4",
"Arch": {},
"EVR": {
"Text": "0:21.12-alt4",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

30
oval/p10/ALT-PU-2024-15423/tests.json Normal file
View File

@ -0,0 +1,30 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:2001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'p10' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:2001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:2001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:202415423001",
"Version": "1",
"Check": "all",
"Comment": "ejabberd is earlier than 0:21.12-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:202415423001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:202415423001"
}
}
]
}