360 lines
15 KiB
JSON
360 lines
15 KiB
JSON
{
|
|
"Definition": [
|
|
{
|
|
"ID": "oval:org.altlinux.errata:def:20172421",
|
|
"Version": "oval:org.altlinux.errata:def:20172421",
|
|
"Class": "patch",
|
|
"Metadata": {
|
|
"Title": "ALT-PU-2017-2421: package `qemu` update to version 2.10.1-alt1",
|
|
"AffectedList": [
|
|
{
|
|
"Family": "unix",
|
|
"Platforms": [
|
|
"ALT Linux branch c9f2"
|
|
],
|
|
"Products": [
|
|
"ALT SPWorkstation",
|
|
"ALT SPServer"
|
|
]
|
|
}
|
|
],
|
|
"References": [
|
|
{
|
|
"RefID": "ALT-PU-2017-2421",
|
|
"RefURL": "https://errata.altlinux.org/ALT-PU-2017-2421",
|
|
"Source": "ALTPU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2019-00222",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2019-00222",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "BDU:2019-04102",
|
|
"RefURL": "https://bdu.fstec.ru/vul/2019-04102",
|
|
"Source": "BDU"
|
|
},
|
|
{
|
|
"RefID": "CVE-2017-15268",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2017-15268",
|
|
"Source": "CVE"
|
|
},
|
|
{
|
|
"RefID": "CVE-2017-7539",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2017-7539",
|
|
"Source": "CVE"
|
|
}
|
|
],
|
|
"Description": "This update upgrades qemu to version 2.10.1-alt1. \nSecurity Fix(es):\n\n * BDU:2019-00222: Уязвимость сервера Qemu-NBD эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании\n\n * BDU:2019-04102: Уязвимость компонента io/channel-websock.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании\n\n * CVE-2017-15268: Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.\n\n * CVE-2017-7539: An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.",
|
|
"Advisory": {
|
|
"From": "errata.altlinux.org",
|
|
"Severity": "High",
|
|
"Rights": "Copyright 2024 BaseALT Ltd.",
|
|
"Issued": {
|
|
"Date": "2017-10-12"
|
|
},
|
|
"Updated": {
|
|
"Date": "2017-10-12"
|
|
},
|
|
"BDUs": [
|
|
{
|
|
"ID": "BDU:2019-00222",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
|
|
"CWE": "CWE-20",
|
|
"Href": "https://bdu.fstec.ru/vul/2019-00222",
|
|
"Impact": "Low",
|
|
"Public": "20170721"
|
|
},
|
|
{
|
|
"ID": "BDU:2019-04102",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
|
|
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
|
"CWE": "CWE-772",
|
|
"Href": "https://bdu.fstec.ru/vul/2019-04102",
|
|
"Impact": "High",
|
|
"Public": "20171010"
|
|
}
|
|
],
|
|
"CVEs": [
|
|
{
|
|
"ID": "CVE-2017-15268",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
|
|
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
|
"CWE": "CWE-772",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2017-15268",
|
|
"Impact": "High",
|
|
"Public": "20171012"
|
|
},
|
|
{
|
|
"ID": "CVE-2017-7539",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
|
|
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
|
"CWE": "CWE-617",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2017-7539",
|
|
"Impact": "High",
|
|
"Public": "20180726"
|
|
}
|
|
],
|
|
"AffectedCPEs": {
|
|
"CPEs": [
|
|
"cpe:/o:alt:spworkstation:8.4",
|
|
"cpe:/o:alt:spserver:8.4"
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"Criteria": {
|
|
"Operator": "AND",
|
|
"Criterions": [
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:3001",
|
|
"Comment": "ALT Linux must be installed"
|
|
}
|
|
],
|
|
"Criterias": [
|
|
{
|
|
"Operator": "OR",
|
|
"Criterions": [
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421001",
|
|
"Comment": "ivshmem-tools is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421002",
|
|
"Comment": "qemu is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421003",
|
|
"Comment": "qemu-aux is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421004",
|
|
"Comment": "qemu-block-curl is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421005",
|
|
"Comment": "qemu-block-dmg is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421006",
|
|
"Comment": "qemu-block-gluster is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421007",
|
|
"Comment": "qemu-block-iscsi is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421008",
|
|
"Comment": "qemu-block-nfs is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421009",
|
|
"Comment": "qemu-block-rbd is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421010",
|
|
"Comment": "qemu-block-ssh is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421011",
|
|
"Comment": "qemu-common is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421012",
|
|
"Comment": "qemu-doc is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421013",
|
|
"Comment": "qemu-guest-agent is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421014",
|
|
"Comment": "qemu-img is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421015",
|
|
"Comment": "qemu-kvm is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421016",
|
|
"Comment": "qemu-kvm-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421017",
|
|
"Comment": "qemu-system is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421018",
|
|
"Comment": "qemu-system-aarch64 is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421019",
|
|
"Comment": "qemu-system-aarch64-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421020",
|
|
"Comment": "qemu-system-alpha is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421021",
|
|
"Comment": "qemu-system-alpha-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421022",
|
|
"Comment": "qemu-system-arm is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421023",
|
|
"Comment": "qemu-system-arm-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421024",
|
|
"Comment": "qemu-system-cris is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421025",
|
|
"Comment": "qemu-system-cris-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421026",
|
|
"Comment": "qemu-system-lm32 is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421027",
|
|
"Comment": "qemu-system-lm32-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421028",
|
|
"Comment": "qemu-system-m68k is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421029",
|
|
"Comment": "qemu-system-m68k-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421030",
|
|
"Comment": "qemu-system-microblaze is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421031",
|
|
"Comment": "qemu-system-microblaze-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421032",
|
|
"Comment": "qemu-system-mips is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421033",
|
|
"Comment": "qemu-system-mips-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421034",
|
|
"Comment": "qemu-system-moxie is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421035",
|
|
"Comment": "qemu-system-moxie-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421036",
|
|
"Comment": "qemu-system-nios2 is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421037",
|
|
"Comment": "qemu-system-nios2-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421038",
|
|
"Comment": "qemu-system-or1k is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421039",
|
|
"Comment": "qemu-system-or1k-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421040",
|
|
"Comment": "qemu-system-ppc is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421041",
|
|
"Comment": "qemu-system-ppc-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421042",
|
|
"Comment": "qemu-system-s390x is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421043",
|
|
"Comment": "qemu-system-s390x-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421044",
|
|
"Comment": "qemu-system-sh4 is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421045",
|
|
"Comment": "qemu-system-sh4-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421046",
|
|
"Comment": "qemu-system-sparc is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421047",
|
|
"Comment": "qemu-system-sparc-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421048",
|
|
"Comment": "qemu-system-tricore is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421049",
|
|
"Comment": "qemu-system-tricore-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421050",
|
|
"Comment": "qemu-system-unicore32 is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421051",
|
|
"Comment": "qemu-system-unicore32-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421052",
|
|
"Comment": "qemu-system-x86 is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421053",
|
|
"Comment": "qemu-system-x86-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421054",
|
|
"Comment": "qemu-system-xtensa is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421055",
|
|
"Comment": "qemu-system-xtensa-core is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421056",
|
|
"Comment": "qemu-user is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421057",
|
|
"Comment": "qemu-user-binfmt is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421058",
|
|
"Comment": "qemu-user-static is earlier than 0:2.10.1-alt1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20172421059",
|
|
"Comment": "qemu-user-static-binfmt is earlier than 0:2.10.1-alt1"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
} |