vuln-list-alt/oval/c10f2/ALT-PU-2023-6258/definitions.json
2024-01-10 07:45:25 +00:00

236 lines
9.7 KiB
JSON

{
"Definition": [
{
"ID": "oval:org.altlinux.errata:def:20236258",
"Version": "oval:org.altlinux.errata:def:20236258",
"Class": "patch",
"Metadata": {
"Title": "ALT-PU-2023-6258: package `libvirt` update to version 9.7.0-alt2",
"AffectedList": [
{
"Family": "unix",
"Platforms": [
"ALT Linux branch c10f2"
]
}
],
"References": [
{
"RefID": "ALT-PU-2023-6258",
"RefURL": "https://errata.altlinux.org/ALT-PU-2023-6258",
"Source": "ALTPU"
},
{
"RefID": "CVE-2023-3750",
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2023-3750",
"Source": "CVE"
}
],
"Description": "This update upgrades libvirt to version 9.7.0-alt2. \nSecurity Fix(es):\n\n * CVE-2023-3750: A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.\n\n * #47442: После добавления модуля TPM 2.0 (TIS) виртуальная машина не запускается",
"Advisory": {
"From": "errata.altlinux.org",
"Severity": "Low",
"Rights": "Copyright 2023 BaseALT Ltd.",
"Issued": {
"Date": "2023-10-25"
},
"Updated": {
"Date": "2023-10-25"
},
"bdu": null,
"Cves": [
{
"Cvss3": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"Cwe": "CWE-667",
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2023-3750",
"Impact": "Low",
"Public": "20230724",
"CveID": "CVE-2023-3750"
}
],
"Bugzilla": [
{
"Id": "47442",
"Href": "https://bugzilla.altlinux.org/47442",
"Data": "После добавления модуля TPM 2.0 (TIS) виртуальная машина не запускается"
}
],
"AffectedCpeList": {
"Cpe": [
"cpe:/o:alt:spworkstation:10",
"cpe:/o:alt:spserver:10"
]
}
}
},
"Criteria": {
"Operator": "AND",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:5001",
"Comment": "ALT Linux must be installed"
}
],
"Criterias": [
{
"Operator": "OR",
"Criterions": [
{
"TestRef": "oval:org.altlinux.errata:tst:20236258001",
"Comment": "libvirt is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258002",
"Comment": "libvirt-admin is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258003",
"Comment": "libvirt-client is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258004",
"Comment": "libvirt-client-qemu is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258005",
"Comment": "libvirt-daemon is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258006",
"Comment": "libvirt-daemon-config-network is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258007",
"Comment": "libvirt-daemon-config-nwfilter is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258008",
"Comment": "libvirt-daemon-driver-interface is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258009",
"Comment": "libvirt-daemon-driver-lxc is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258010",
"Comment": "libvirt-daemon-driver-network is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258011",
"Comment": "libvirt-daemon-driver-nodedev is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258012",
"Comment": "libvirt-daemon-driver-nwfilter is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258013",
"Comment": "libvirt-daemon-driver-qemu is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258014",
"Comment": "libvirt-daemon-driver-secret is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258015",
"Comment": "libvirt-daemon-driver-storage is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258016",
"Comment": "libvirt-daemon-driver-storage-core is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258017",
"Comment": "libvirt-daemon-driver-storage-disk is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258018",
"Comment": "libvirt-daemon-driver-storage-fs is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258019",
"Comment": "libvirt-daemon-driver-storage-gluster is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258020",
"Comment": "libvirt-daemon-driver-storage-iscsi is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258021",
"Comment": "libvirt-daemon-driver-storage-iscsi-direct is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258022",
"Comment": "libvirt-daemon-driver-storage-logical is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258023",
"Comment": "libvirt-daemon-driver-storage-mpath is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258024",
"Comment": "libvirt-daemon-driver-storage-rbd is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258025",
"Comment": "libvirt-daemon-driver-storage-scsi is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258026",
"Comment": "libvirt-daemon-driver-storage-zfs is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258027",
"Comment": "libvirt-daemon-driver-vbox is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258028",
"Comment": "libvirt-devel is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258029",
"Comment": "libvirt-docs is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258030",
"Comment": "libvirt-kvm is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258031",
"Comment": "libvirt-libs is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258032",
"Comment": "libvirt-lock-sanlock is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258033",
"Comment": "libvirt-login-shell is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258034",
"Comment": "libvirt-lxc is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258035",
"Comment": "libvirt-qemu is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258036",
"Comment": "libvirt-qemu-common is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258037",
"Comment": "libvirt-vbox is earlier than 0:9.7.0-alt2"
},
{
"TestRef": "oval:org.altlinux.errata:tst:20236258038",
"Comment": "nss-libvirt is earlier than 0:9.7.0-alt2"
}
]
}
]
}
}
]
}