ALT Vulnerability

2024-09-12 03:05:43 +00:00 · 2024-09-12 03:05:43 +00:00 · e2bb9f2713
commit e2bb9f2713
parent 4f74dfc8a4
8 changed files with 487 additions and 0 deletions
--- a/oval/c10f1/ALT-PU-2024-11074/definitions.json
+++ b/oval/c10f1/ALT-PU-2024-11074/definitions.json
@ -0,0 +1,81 @@
+{
+  "Definition": [
+    {
+      "ID": "oval:org.altlinux.errata:def:202411074",
+      "Version": "oval:org.altlinux.errata:def:202411074",
+      "Class": "patch",
+      "Metadata": {
+        "Title": "ALT-PU-2024-11074: package `python-module-six` update to version 1.16.0-alt1.p10",
+        "AffectedList": [
+          {
+            "Family": "unix",
+            "Platforms": [
+              "ALT Linux branch c10f1"
+            ],
+            "Products": [
+              "ALT SP Workstation",
+              "ALT SP Server"
+            ]
+          }
+        ],
+        "References": [
+          {
+            "RefID": "ALT-PU-2024-11074",
+            "RefURL": "https://errata.altlinux.org/ALT-PU-2024-11074",
+            "Source": "ALTPU"
+          }
+        ],
+        "Description": "This update upgrades python-module-six to version 1.16.0-alt1.p10. \nSecurity Fix(es):\n\n * #40787: Просьба обновить python3-module-six до 1.16.0",
+        "Advisory": {
+          "From": "errata.altlinux.org",
+          "Severity": "Low",
+          "Rights": "Copyright 2024 BaseALT Ltd.",
+          "Issued": {
+            "Date": "2024-09-04"
+          },
+          "Updated": {
+            "Date": "2024-09-04"
+          },
+          "BDUs": null,
+          "Bugzilla": [
+            {
+              "ID": "40787",
+              "Href": "https://bugzilla.altlinux.org/40787",
+              "Data": "Просьба обновить python3-module-six до 1.16.0"
+            }
+          ],
+          "AffectedCPEs": {
+            "CPEs": [
+              "cpe:/o:alt:spworkstation:10",
+              "cpe:/o:alt:spserver:10"
+            ]
+          }
+        }
+      },
+      "Criteria": {
+        "Operator": "AND",
+        "Criterions": [
+          {
+            "TestRef": "oval:org.altlinux.errata:tst:4001",
+            "Comment": "ALT Linux must be installed"
+          }
+        ],
+        "Criterias": [
+          {
+            "Operator": "OR",
+            "Criterions": [
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202411074001",
+                "Comment": "python-module-six is earlier than 0:1.16.0-alt1.p10"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202411074002",
+                "Comment": "python3-module-six is earlier than 0:1.16.0-alt1.p10"
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-11074/objects.json
+++ b/oval/c10f1/ALT-PU-2024-11074/objects.json
@ -0,0 +1,40 @@
+{
+  "TextFileContent54Objects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:4001",
+      "Version": "1",
+      "Comment": "Evaluate `/etc/os-release` file content",
+      "Path": {
+        "Datatype": "string",
+        "Text": "/etc"
+      },
+      "Filepath": {
+        "Datatype": "string",
+        "Text": "os-release"
+      },
+      "Pattern": {
+        "Datatype": "string",
+        "Operation": "pattern match",
+        "Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
+      },
+      "Instance": {
+        "Datatype": "int",
+        "Text": "1"
+      }
+    }
+  ],
+  "RPMInfoObjects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:202411074001",
+      "Version": "1",
+      "Comment": "python-module-six is installed",
+      "Name": "python-module-six"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202411074002",
+      "Version": "1",
+      "Comment": "python3-module-six is installed",
+      "Name": "python3-module-six"
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-11074/states.json
+++ b/oval/c10f1/ALT-PU-2024-11074/states.json
@ -0,0 +1,23 @@
+{
+  "TextFileContent54State": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:4001",
+      "Version": "1",
+      "Text": {}
+    }
+  ],
+  "RPMInfoStates": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:202411074001",
+      "Version": "1",
+      "Comment": "package EVR is earlier than 0:1.16.0-alt1.p10",
+      "Arch": {},
+      "EVR": {
+        "Text": "0:1.16.0-alt1.p10",
+        "Datatype": "evr_string",
+        "Operation": "less than"
+      },
+      "Subexpression": {}
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-11074/tests.json
+++ b/oval/c10f1/ALT-PU-2024-11074/tests.json
@ -0,0 +1,42 @@
+{
+  "TextFileContent54Tests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:4001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ALT Linux based on branch 'c10f1' must be installed",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:4001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:4001"
+      }
+    }
+  ],
+  "RPMInfoTests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:202411074001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "python-module-six is earlier than 0:1.16.0-alt1.p10",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202411074001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202411074001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202411074002",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "python3-module-six is earlier than 0:1.16.0-alt1.p10",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202411074002"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202411074001"
+      }
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-12359/definitions.json
+++ b/oval/c10f1/ALT-PU-2024-12359/definitions.json
@ -0,0 +1,178 @@
+{
+  "Definition": [
+    {
+      "ID": "oval:org.altlinux.errata:def:202412359",
+      "Version": "oval:org.altlinux.errata:def:202412359",
+      "Class": "patch",
+      "Metadata": {
+        "Title": "ALT-PU-2024-12359: package `mosquitto` update to version 2.0.15-alt1",
+        "AffectedList": [
+          {
+            "Family": "unix",
+            "Platforms": [
+              "ALT Linux branch c10f1"
+            ],
+            "Products": [
+              "ALT SP Workstation",
+              "ALT SP Server"
+            ]
+          }
+        ],
+        "References": [
+          {
+            "RefID": "ALT-PU-2024-12359",
+            "RefURL": "https://errata.altlinux.org/ALT-PU-2024-12359",
+            "Source": "ALTPU"
+          },
+          {
+            "RefID": "BDU:2022-01688",
+            "RefURL": "https://bdu.fstec.ru/vul/2022-01688",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "BDU:2022-01775",
+            "RefURL": "https://bdu.fstec.ru/vul/2022-01775",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "BDU:2022-03119",
+            "RefURL": "https://bdu.fstec.ru/vul/2022-03119",
+            "Source": "BDU"
+          },
+          {
+            "RefID": "CVE-2021-34431",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-34431",
+            "Source": "CVE"
+          },
+          {
+            "RefID": "CVE-2021-34432",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-34432",
+            "Source": "CVE"
+          },
+          {
+            "RefID": "CVE-2021-41039",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-41039",
+            "Source": "CVE"
+          },
+          {
+            "RefID": "CVE-2023-5632",
+            "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-5632",
+            "Source": "CVE"
+          }
+        ],
+        "Description": "This update upgrades mosquitto to version 2.0.15-alt1. \nSecurity Fix(es):\n\n * BDU:2022-01688: Уязвимость брокера сообщений Mosquitto, связанная с ошибками при освобождении ресурсов, позволяющая нарушителю вызвать отказ в обслуживании\n\n * BDU:2022-01775: Уязвимость брокера сообщений Mosquitto, связанная с неправильным освобождением памяти перед удалением последний ссылки, позволяющая нарушителю вызвать отказ в обслуживании\n\n * BDU:2022-03119: Уязвимость реализации протокола MQTT v5 брокера сообщений Eclipse Mosquitto, позволяющая нарушителю вызвать отказ в обслуживании\n\n * CVE-2021-34431: In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.\n\n * CVE-2021-34432: In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.\n\n * CVE-2021-41039: In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.\n\n * CVE-2023-5632: In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6\n\n\n",
+        "Advisory": {
+          "From": "errata.altlinux.org",
+          "Severity": "High",
+          "Rights": "Copyright 2024 BaseALT Ltd.",
+          "Issued": {
+            "Date": "2024-09-11"
+          },
+          "Updated": {
+            "Date": "2024-09-11"
+          },
+          "BDUs": [
+            {
+              "ID": "BDU:2022-01688",
+              "CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
+              "CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+              "CWE": "CWE-404",
+              "Href": "https://bdu.fstec.ru/vul/2022-01688",
+              "Impact": "High",
+              "Public": "20210610"
+            },
+            {
+              "ID": "BDU:2022-01775",
+              "CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
+              "CVSS3": "AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+              "CWE": "CWE-401",
+              "Href": "https://bdu.fstec.ru/vul/2022-01775",
+              "Impact": "Low",
+              "Public": "20210722"
+            },
+            {
+              "ID": "BDU:2022-03119",
+              "CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
+              "CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+              "CWE": "CWE-1050",
+              "Href": "https://bdu.fstec.ru/vul/2022-03119",
+              "Impact": "High",
+              "Public": "20210809"
+            }
+          ],
+          "CVEs": [
+            {
+              "ID": "CVE-2021-34431",
+              "CVSS": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
+              "CVSS3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+              "CWE": "CWE-401",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-34431",
+              "Impact": "Low",
+              "Public": "20210722"
+            },
+            {
+              "ID": "CVE-2021-34432",
+              "CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
+              "CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+              "CWE": "NVD-CWE-noinfo",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-34432",
+              "Impact": "High",
+              "Public": "20210727"
+            },
+            {
+              "ID": "CVE-2021-41039",
+              "CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
+              "CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+              "CWE": "NVD-CWE-Other",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-41039",
+              "Impact": "High",
+              "Public": "20211201"
+            },
+            {
+              "ID": "CVE-2023-5632",
+              "CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+              "CWE": "CWE-834",
+              "Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-5632",
+              "Impact": "High",
+              "Public": "20231018"
+            }
+          ],
+          "AffectedCPEs": {
+            "CPEs": [
+              "cpe:/o:alt:spworkstation:10",
+              "cpe:/o:alt:spserver:10"
+            ]
+          }
+        }
+      },
+      "Criteria": {
+        "Operator": "AND",
+        "Criterions": [
+          {
+            "TestRef": "oval:org.altlinux.errata:tst:4001",
+            "Comment": "ALT Linux must be installed"
+          }
+        ],
+        "Criterias": [
+          {
+            "Operator": "OR",
+            "Criterions": [
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202412359001",
+                "Comment": "libmosquitto is earlier than 0:2.0.15-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202412359002",
+                "Comment": "libmosquitto-devel is earlier than 0:2.0.15-alt1"
+              },
+              {
+                "TestRef": "oval:org.altlinux.errata:tst:202412359003",
+                "Comment": "mosquitto is earlier than 0:2.0.15-alt1"
+              }
+            ]
+          }
+        ]
+      }
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-12359/objects.json
+++ b/oval/c10f1/ALT-PU-2024-12359/objects.json
@ -0,0 +1,46 @@
+{
+  "TextFileContent54Objects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:4001",
+      "Version": "1",
+      "Comment": "Evaluate `/etc/os-release` file content",
+      "Path": {
+        "Datatype": "string",
+        "Text": "/etc"
+      },
+      "Filepath": {
+        "Datatype": "string",
+        "Text": "os-release"
+      },
+      "Pattern": {
+        "Datatype": "string",
+        "Operation": "pattern match",
+        "Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
+      },
+      "Instance": {
+        "Datatype": "int",
+        "Text": "1"
+      }
+    }
+  ],
+  "RPMInfoObjects": [
+    {
+      "ID": "oval:org.altlinux.errata:obj:202412359001",
+      "Version": "1",
+      "Comment": "libmosquitto is installed",
+      "Name": "libmosquitto"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202412359002",
+      "Version": "1",
+      "Comment": "libmosquitto-devel is installed",
+      "Name": "libmosquitto-devel"
+    },
+    {
+      "ID": "oval:org.altlinux.errata:obj:202412359003",
+      "Version": "1",
+      "Comment": "mosquitto is installed",
+      "Name": "mosquitto"
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-12359/states.json
+++ b/oval/c10f1/ALT-PU-2024-12359/states.json
@ -0,0 +1,23 @@
+{
+  "TextFileContent54State": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:4001",
+      "Version": "1",
+      "Text": {}
+    }
+  ],
+  "RPMInfoStates": [
+    {
+      "ID": "oval:org.altlinux.errata:ste:202412359001",
+      "Version": "1",
+      "Comment": "package EVR is earlier than 0:2.0.15-alt1",
+      "Arch": {},
+      "EVR": {
+        "Text": "0:2.0.15-alt1",
+        "Datatype": "evr_string",
+        "Operation": "less than"
+      },
+      "Subexpression": {}
+    }
+  ]
+}
--- a/oval/c10f1/ALT-PU-2024-12359/tests.json
+++ b/oval/c10f1/ALT-PU-2024-12359/tests.json
@ -0,0 +1,54 @@
+{
+  "TextFileContent54Tests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:4001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "ALT Linux based on branch 'c10f1' must be installed",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:4001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:4001"
+      }
+    }
+  ],
+  "RPMInfoTests": [
+    {
+      "ID": "oval:org.altlinux.errata:tst:202412359001",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "libmosquitto is earlier than 0:2.0.15-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202412359001"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202412359001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202412359002",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "libmosquitto-devel is earlier than 0:2.0.15-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202412359002"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202412359001"
+      }
+    },
+    {
+      "ID": "oval:org.altlinux.errata:tst:202412359003",
+      "Version": "1",
+      "Check": "all",
+      "Comment": "mosquitto is earlier than 0:2.0.15-alt1",
+      "Object": {
+        "ObjectRef": "oval:org.altlinux.errata:obj:202412359003"
+      },
+      "State": {
+        "StateRef": "oval:org.altlinux.errata:ste:202412359001"
+      }
+    }
+  ]
+}