pepelyaevip/vuln-list-alt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ALT Vulnerability

Browse Source
This commit is contained in:
Иван Пепеляев 2024-03-29 15:02:05 +00:00
parent 560a19d084
commit f653c34c10
20 changed files with 4400 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

160
oval/c10f1/ALT-PU-2024-4539/definitions.json Normal file
View File

@ -0,0 +1,160 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244539",
"Version": "oval:org.altlinux.errata:def:20244539",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4539: package `cyrus-sasl2` update to version 2.1.28-alt1",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f1"
],
"Products": [
"ALT SP Workstation",
"ALT SP Server"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4539",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4539",
"Source": "ALTPU"
},
{
"RefID": "BDU:2020-01461",
"RefURL": "https://bdu.fstec.ru/vul/2020-01461",
"Source": "BDU"
},
{
"RefID": "BDU:2022-01443",
"RefURL": "https://bdu.fstec.ru/vul/2022-01443",
"Source": "BDU"
},
{
"RefID": "CVE-2019-19906",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2019-19906",
"Source": "CVE"
},
{
"RefID": "CVE-2022-24407",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2022-24407",
"Source": "CVE"
}
],
"Description": "This update upgrades cyrus-sasl2 to version 2.1.28-alt1. \nSecurity Fix(es):\n\n * BDU:2020-01461: Уязвимость метода аунтефикации пользователей Cyrus SASL, связанная с записью за границами буфера памяти, позволяющая нарушителю вызвать отказ в обслуживании\n\n * BDU:2022-01443: Уязвимость реализации механизма аутентификации Cyrus SASL, связанная с непринятием мер по защите структуры SQL-запроса, позволяющая нарушителю выполнить произвольный SQL-запрос\n\n * CVE-2019-19906: cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.\n\n * CVE-2022-24407: In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.\n\n * #49511: При подготовке к Usrmerge сломался sssd",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Critical",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-29"
},
"Updated": {
"Date": "2024-03-29"
},
"bdu": [
{
"Cvss": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"Cvss3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"Cwe": "CWE-787",
"Href": "https://bdu.fstec.ru/vul/2020-01461",
"Impact": "High",
"Public": "20191125",
"CveID": "BDU:2020-01461"
},
{
"Cvss": "AV:N/AC:L/Au:N/C:C/I:C/A:N",
"Cvss3": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"Cwe": "CWE-89",
"Href": "https://bdu.fstec.ru/vul/2022-01443",
"Impact": "Critical",
"Public": "20220302",
"CveID": "BDU:2022-01443"
}
],
"Cves": [
{
"Cvss": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"Cwe": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2019-19906",
"Impact": "High",
"Public": "20191219",
"CveID": "CVE-2019-19906"
},
{
"Cvss": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-89",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2022-24407",
"Impact": "High",
"Public": "20220224",
"CveID": "CVE-2022-24407"
}
],
"Bugzilla": [
{
"Id": "49511",
"Href": "https://bugzilla.altlinux.org/49511",
"Data": "При подготовке к Usrmerge сломался sssd"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:4001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244539001",
"Comment": "cyrus-sasl2 is earlier than 0:2.1.28-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244539002",
"Comment": "cyrus-sasl2-docs is earlier than 0:2.1.28-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244539003",
"Comment": "libsasl2-3 is earlier than 0:2.1.28-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244539004",
"Comment": "libsasl2-devel is earlier than 0:2.1.28-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244539005",
"Comment": "libsasl2-plugin-gssapi is earlier than 0:2.1.28-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244539006",
"Comment": "libsasl2-plugin-ldapdb is earlier than 0:2.1.28-alt1"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244539007",
"Comment": "libsasl2-plugin-sql is earlier than 0:2.1.28-alt1"
}
]
}
]
}
}
]
}

70
oval/c10f1/ALT-PU-2024-4539/objects.json Normal file
View File

@ -0,0 +1,70 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:4001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244539001",
"Version": "1",
"comment": "cyrus-sasl2 is installed",
"Name": "cyrus-sasl2"
},
{
"ID": "oval:org.altlinux.errata:obj:20244539002",
"Version": "1",
"comment": "cyrus-sasl2-docs is installed",
"Name": "cyrus-sasl2-docs"
},
{
"ID": "oval:org.altlinux.errata:obj:20244539003",
"Version": "1",
"comment": "libsasl2-3 is installed",
"Name": "libsasl2-3"
},
{
"ID": "oval:org.altlinux.errata:obj:20244539004",
"Version": "1",
"comment": "libsasl2-devel is installed",
"Name": "libsasl2-devel"
},
{
"ID": "oval:org.altlinux.errata:obj:20244539005",
"Version": "1",
"comment": "libsasl2-plugin-gssapi is installed",
"Name": "libsasl2-plugin-gssapi"
},
{
"ID": "oval:org.altlinux.errata:obj:20244539006",
"Version": "1",
"comment": "libsasl2-plugin-ldapdb is installed",
"Name": "libsasl2-plugin-ldapdb"
},
{
"ID": "oval:org.altlinux.errata:obj:20244539007",
"Version": "1",
"comment": "libsasl2-plugin-sql is installed",
"Name": "libsasl2-plugin-sql"
}
]
}

23
oval/c10f1/ALT-PU-2024-4539/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:4001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244539001",
"Version": "1",
"Comment": "package EVR is earlier than 0:2.1.28-alt1",
"Arch": {},
"Evr": {
"Text": "0:2.1.28-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

102
oval/c10f1/ALT-PU-2024-4539/tests.json Normal file
View File

@ -0,0 +1,102 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:4001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f1' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:4001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:4001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244539001",
"Version": "1",
"Check": "all",
"Comment": "cyrus-sasl2 is earlier than 0:2.1.28-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244539001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244539001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244539002",
"Version": "1",
"Check": "all",
"Comment": "cyrus-sasl2-docs is earlier than 0:2.1.28-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244539002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244539001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244539003",
"Version": "1",
"Check": "all",
"Comment": "libsasl2-3 is earlier than 0:2.1.28-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244539003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244539001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244539004",
"Version": "1",
"Check": "all",
"Comment": "libsasl2-devel is earlier than 0:2.1.28-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244539004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244539001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244539005",
"Version": "1",
"Check": "all",
"Comment": "libsasl2-plugin-gssapi is earlier than 0:2.1.28-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244539005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244539001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244539006",
"Version": "1",
"Check": "all",
"Comment": "libsasl2-plugin-ldapdb is earlier than 0:2.1.28-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244539006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244539001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244539007",
"Version": "1",
"Check": "all",
"Comment": "libsasl2-plugin-sql is earlier than 0:2.1.28-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244539007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244539001"
}
}
]
}

292
oval/c10f2/ALT-PU-2024-4542/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

70
oval/c10f2/ALT-PU-2024-4542/objects.json Normal file
View File

@ -0,0 +1,70 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244542001",
"Version": "1",
"comment": "xorg-sdk is installed",
"Name": "xorg-sdk"
},
{
"ID": "oval:org.altlinux.errata:obj:20244542002",
"Version": "1",
"comment": "xorg-server is installed",
"Name": "xorg-server"
},
{
"ID": "oval:org.altlinux.errata:obj:20244542003",
"Version": "1",
"comment": "xorg-server-common is installed",
"Name": "xorg-server-common"
},
{
"ID": "oval:org.altlinux.errata:obj:20244542004",
"Version": "1",
"comment": "xorg-xdmx is installed",
"Name": "xorg-xdmx"
},
{
"ID": "oval:org.altlinux.errata:obj:20244542005",
"Version": "1",
"comment": "xorg-xephyr is installed",
"Name": "xorg-xephyr"
},
{
"ID": "oval:org.altlinux.errata:obj:20244542006",
"Version": "1",
"comment": "xorg-xnest is installed",
"Name": "xorg-xnest"
},
{
"ID": "oval:org.altlinux.errata:obj:20244542007",
"Version": "1",
"comment": "xorg-xvfb is installed",
"Name": "xorg-xvfb"
}
]
}

23
oval/c10f2/ALT-PU-2024-4542/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244542001",
"Version": "1",
"Comment": "package EVR is earlier than 2:1.20.14-alt11",
"Arch": {},
"Evr": {
"Text": "2:1.20.14-alt11",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

102
oval/c10f2/ALT-PU-2024-4542/tests.json Normal file
View File

@ -0,0 +1,102 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244542001",
"Version": "1",
"Check": "all",
"Comment": "xorg-sdk is earlier than 2:1.20.14-alt11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244542001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244542001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244542002",
"Version": "1",
"Check": "all",
"Comment": "xorg-server is earlier than 2:1.20.14-alt11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244542002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244542001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244542003",
"Version": "1",
"Check": "all",
"Comment": "xorg-server-common is earlier than 2:1.20.14-alt11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244542003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244542001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244542004",
"Version": "1",
"Check": "all",
"Comment": "xorg-xdmx is earlier than 2:1.20.14-alt11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244542004"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244542001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244542005",
"Version": "1",
"Check": "all",
"Comment": "xorg-xephyr is earlier than 2:1.20.14-alt11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244542005"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244542001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244542006",
"Version": "1",
"Check": "all",
"Comment": "xorg-xnest is earlier than 2:1.20.14-alt11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244542006"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244542001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244542007",
"Version": "1",
"Check": "all",
"Comment": "xorg-xvfb is earlier than 2:1.20.14-alt11",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244542007"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244542001"
}
}
]
}

245
oval/c10f2/ALT-PU-2024-4544/definitions.json Normal file
View File

@ -0,0 +1,245 @@
{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20244544",
"Version": "oval:org.altlinux.errata:def:20244544",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2024-4544: package `xorg-xwayland` update to version 23.1.1-alt4",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f2"
]
}
],
"References": [
{
"RefID": "ALT-PU-2024-4544",
"RefURL": "https://errata.altlinux.org/ALT-PU-2024-4544",
"Source": "ALTPU"
},
{
"RefID": "BDU:2024-00405",
"RefURL": "https://bdu.fstec.ru/vul/2024-00405",
"Source": "BDU"
},
{
"RefID": "BDU:2024-00457",
"RefURL": "https://bdu.fstec.ru/vul/2024-00457",
"Source": "BDU"
},
{
"RefID": "BDU:2024-00638",
"RefURL": "https://bdu.fstec.ru/vul/2024-00638",
"Source": "BDU"
},
{
"RefID": "BDU:2024-00667",
"RefURL": "https://bdu.fstec.ru/vul/2024-00667",
"Source": "BDU"
},
{
"RefID": "BDU:2024-00675",
"RefURL": "https://bdu.fstec.ru/vul/2024-00675",
"Source": "BDU"
},
{
"RefID": "BDU:2024-00676",
"RefURL": "https://bdu.fstec.ru/vul/2024-00676",
"Source": "BDU"
},
{
"RefID": "CVE-2023-6377",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-6377",
"Source": "CVE"
},
{
"RefID": "CVE-2023-6478",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-6478",
"Source": "CVE"
},
{
"RefID": "CVE-2023-6816",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-6816",
"Source": "CVE"
},
{
"RefID": "CVE-2024-0229",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-0229",
"Source": "CVE"
},
{
"RefID": "CVE-2024-0408",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-0408",
"Source": "CVE"
},
{
"RefID": "CVE-2024-21885",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-21885",
"Source": "CVE"
},
{
"RefID": "CVE-2024-21886",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2024-21886",
"Source": "CVE"
}
],
"Description": "This update upgrades xorg-xwayland to version 23.1.1-alt4. \nSecurity Fix(es):\n\n * BDU:2024-00405: Уязвимость функций DeviceFocusEvent и XIQueryPointer реализации сервера X Window System X.Org Server, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании\n\n * BDU:2024-00457: Уязвимость пакета xorg-x11-server, связанная с использованием памяти после её освобождения при обработке объектов Button Action, позволяющая повысить свои привилегии и выполнить произвольный код в контексте root\n\n * BDU:2024-00638: Уязвимость компонента GLX PBuffer Handler реализации сервера X Window System X.Org Server, позволяющая нарушителю вызвать отказ в обслуживании\n\n * BDU:2024-00667: Уязвимость функции XISendDeviceHierarchyEvent реализации протокола Wayland для X.Org XWayland, реализации сервера X Window System X.Org Server, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код\n\n * BDU:2024-00675: Уязвимость функции DisableDevice реализации протокола Wayland для X.Org XWayland, реализации сервера X Window System X.Org Server, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код\n\n * BDU:2024-00676: Уязвимость реализации протокола Wayland для X.Org XWayland, реализации сервера X Window System X.Org Server, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код\n\n * CVE-2023-6377: A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.\n\n * CVE-2023-6478: A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.\n\n * CVE-2023-6816: A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.\n\n * CVE-2024-0229: An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the server runs with extended privileges), or remote code execution in SSH X11 forwarding environments.\n\n * CVE-2024-0408: A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.\n\n * CVE-2024-21885: A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.\n\n * CVE-2024-21886: A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Critical",
"Rights": "Copyright 2024 BaseALT Ltd.",
"Issued": {
"Date": "2024-03-29"
},
"Updated": {
"Date": "2024-03-29"
},
"bdu": [
{
"Cvss": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"Cvss3": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-119",
"Href": "https://bdu.fstec.ru/vul/2024-00405",
"Impact": "High",
"Public": "20240116",
"CveID": "BDU:2024-00405"
},
{
"Cvss": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"Cvss3": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-125, CWE-787",
"Href": "https://bdu.fstec.ru/vul/2024-00457",
"Impact": "High",
"Public": "20231213",
"CveID": "BDU:2024-00457"
},
{
"Cvss": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
"Cvss3": "AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"Cwe": "CWE-158",
"Href": "https://bdu.fstec.ru/vul/2024-00638",
"Impact": "Low",
"Public": "20240116",
"CveID": "BDU:2024-00638"
},
{
"Cvss": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"Cvss3": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-122",
"Href": "https://bdu.fstec.ru/vul/2024-00667",
"Impact": "High",
"Public": "20240116",
"CveID": "BDU:2024-00667"
},
{
"Cvss": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"Cvss3": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-122",
"Href": "https://bdu.fstec.ru/vul/2024-00675",
"Impact": "High",
"Public": "20240116",
"CveID": "BDU:2024-00675"
},
{
"Cvss": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"Cvss3": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-788",
"Href": "https://bdu.fstec.ru/vul/2024-00676",
"Impact": "High",
"Public": "20240116",
"CveID": "BDU:2024-00676"
}
],
"Cves": [
{
"Cvss3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-125",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-6377",
"Impact": "High",
"Public": "20231213",
"CveID": "CVE-2023-6377"
},
{
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"Cwe": "CWE-190",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-6478",
"Impact": "High",
"Public": "20231213",
"CveID": "CVE-2023-6478"
},
{
"Cvss3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"Cwe": "CWE-787",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-6816",
"Impact": "Critical",
"Public": "20240118",
"CveID": "CVE-2023-6816"
},
{
"Cwe": "CWE-788",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-0229",
"Impact": "None",
"Public": "20240209",
"CveID": "CVE-2024-0229"
},
{
"Cvss3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"Cwe": "NVD-CWE-Other",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-0408",
"Impact": "Low",
"Public": "20240118",
"CveID": "CVE-2024-0408"
},
{
"Cwe": "CWE-122",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-21885",
"Impact": "None",
"Public": "20240228",
"CveID": "CVE-2024-21885"
},
{
"Cwe": "CWE-122",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2024-21886",
"Impact": "None",
"Public": "20240228",
"CveID": "CVE-2024-21886"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20244544001",
"Comment": "xorg-xwayland is earlier than 2:23.1.1-alt4"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20244544002",
"Comment": "xorg-xwayland-devel is earlier than 2:23.1.1-alt4"
}
]
}
]
}
}
]
}

40
oval/c10f2/ALT-PU-2024-4544/objects.json Normal file
View File

@ -0,0 +1,40 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244544001",
"Version": "1",
"comment": "xorg-xwayland is installed",
"Name": "xorg-xwayland"
},
{
"ID": "oval:org.altlinux.errata:obj:20244544002",
"Version": "1",
"comment": "xorg-xwayland-devel is installed",
"Name": "xorg-xwayland-devel"
}
]
}

23
oval/c10f2/ALT-PU-2024-4544/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244544001",
"Version": "1",
"Comment": "package EVR is earlier than 2:23.1.1-alt4",
"Arch": {},
"Evr": {
"Text": "2:23.1.1-alt4",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

42
oval/c10f2/ALT-PU-2024-4544/tests.json Normal file
View File

@ -0,0 +1,42 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244544001",
"Version": "1",
"Check": "all",
"Comment": "xorg-xwayland is earlier than 2:23.1.1-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244544001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244544001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244544002",
"Version": "1",
"Check": "all",
"Comment": "xorg-xwayland-devel is earlier than 2:23.1.1-alt4",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244544002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244544001"
}
}
]
}

2319
oval/c10f2/ALT-PU-2024-4601/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

46
oval/c10f2/ALT-PU-2024-4601/objects.json Normal file
View File

@ -0,0 +1,46 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:5001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d+)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244601001",
"Version": "1",
"comment": "rpm-build-thunderbird is installed",
"Name": "rpm-build-thunderbird"
},
{
"ID": "oval:org.altlinux.errata:obj:20244601002",
"Version": "1",
"comment": "thunderbird is installed",
"Name": "thunderbird"
},
{
"ID": "oval:org.altlinux.errata:obj:20244601003",
"Version": "1",
"comment": "thunderbird-wayland is installed",
"Name": "thunderbird-wayland"
}
]
}

23
oval/c10f2/ALT-PU-2024-4601/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:5001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244601001",
"Version": "1",
"Comment": "package EVR is earlier than 0:115.8.1-alt0.c10.1",
"Arch": {},
"Evr": {
"Text": "0:115.8.1-alt0.c10.1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

54
oval/c10f2/ALT-PU-2024-4601/tests.json Normal file
View File

@ -0,0 +1,54 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:5001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c10f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:5001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:5001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244601001",
"Version": "1",
"Check": "all",
"Comment": "rpm-build-thunderbird is earlier than 0:115.8.1-alt0.c10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244601001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244601001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244601002",
"Version": "1",
"Check": "all",
"Comment": "thunderbird is earlier than 0:115.8.1-alt0.c10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244601002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244601001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244601003",
"Version": "1",
"Check": "all",
"Comment": "thunderbird-wayland is earlier than 0:115.8.1-alt0.c10.1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244601003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244601001"
}
}
]
}

643
oval/c9f2/ALT-PU-2024-4547/definitions.json Normal file
View File

File diff suppressed because one or more lines are too long

46
oval/c9f2/ALT-PU-2024-4547/objects.json Normal file
View File

@ -0,0 +1,46 @@
{
"TextFileContent54Objects": [
{
"ID": "oval:org.altlinux.errata:obj:3001",
"Version": "1",
"comment": "Evaluate `/etc/os-release` file content",
"Path": {
"dataType": "string",
"Text": "/etc"
},
"Filepath": {
"Datatype": "string",
"Text": "os-release"
},
"Pattern": {
"Datatype": "string",
"Operation": "pattern match",
"Text": "cpe:\\/o:alt:sp(?:server|workstation):(\\d\\.\\d)"
},
"Instance": {
"Datatype": "int",
"Text": "1"
}
}
],
"RpmInfoObjects": [
{
"ID": "oval:org.altlinux.errata:obj:20244547001",
"Version": "1",
"comment": "itop is installed",
"Name": "itop"
},
{
"ID": "oval:org.altlinux.errata:obj:20244547002",
"Version": "1",
"comment": "itop-apache2 is installed",
"Name": "itop-apache2"
},
{
"ID": "oval:org.altlinux.errata:obj:20244547003",
"Version": "1",
"comment": "itop-php8.1 is installed",
"Name": "itop-php8.1"
}
]
}

23
oval/c9f2/ALT-PU-2024-4547/states.json Normal file
View File

@ -0,0 +1,23 @@
{
"TextFileContent54State": [
{
"ID": "oval:org.altlinux.errata:ste:3001",
"Version": "1",
"Text": {}
}
],
"RpmInfoState": [
{
"ID": "oval:org.altlinux.errata:ste:20244547001",
"Version": "1",
"Comment": "package EVR is earlier than 0:3.1.1.1-alt1",
"Arch": {},
"Evr": {
"Text": "0:3.1.1.1-alt1",
"Datatype": "evr_string",
"Operation": "less than"
},
"Subexpression": {}
}
]
}

54
oval/c9f2/ALT-PU-2024-4547/tests.json Normal file
View File

@ -0,0 +1,54 @@
{
"TextFileContent54Tests": [
{
"ID": "oval:org.altlinux.errata:tst:3001",
"Version": "1",
"Check": "all",
"Comment": "ALT Linux based on branch 'c9f2' must be installed",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:3001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:3001"
}
}
],
"RPMInfoTests": [
{
"ID": "oval:org.altlinux.errata:tst:20244547001",
"Version": "1",
"Check": "all",
"Comment": "itop is earlier than 0:3.1.1.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244547001"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244547001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244547002",
"Version": "1",
"Check": "all",
"Comment": "itop-apache2 is earlier than 0:3.1.1.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244547002"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244547001"
}
},
{
"ID": "oval:org.altlinux.errata:tst:20244547003",
"Version": "1",
"Check": "all",
"Comment": "itop-php8.1 is earlier than 0:3.1.1.1-alt1",
"Object": {
"ObjectRef": "oval:org.altlinux.errata:obj:20244547003"
},
"State": {
"StateRef": "oval:org.altlinux.errata:ste:20244547001"
}
}
]
}