123 lines
4.4 KiB
JSON
123 lines
4.4 KiB
JSON
{
|
||
"Definition": [
|
||
{
|
||
"ID": "oval:org.altlinux.errata:def:20161864",
|
||
"Version": "oval:org.altlinux.errata:def:20161864",
|
||
"Class": "patch",
|
||
"Metadata": {
|
||
"Title": "ALT-PU-2016-1864: package `libgcrypt` update to version 1.6.6-alt1",
|
||
"AffectedList": [
|
||
{
|
||
"Family": "unix",
|
||
"Platforms": [
|
||
"ALT Linux branch p11"
|
||
],
|
||
"Products": [
|
||
"ALT Container"
|
||
]
|
||
}
|
||
],
|
||
"References": [
|
||
{
|
||
"RefID": "ALT-PU-2016-1864",
|
||
"RefURL": "https://errata.altlinux.org/ALT-PU-2016-1864",
|
||
"Source": "ALTPU"
|
||
},
|
||
{
|
||
"RefID": "BDU:2019-01635",
|
||
"RefURL": "https://bdu.fstec.ru/vul/2019-01635",
|
||
"Source": "BDU"
|
||
},
|
||
{
|
||
"RefID": "CVE-2016-6313",
|
||
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2016-6313",
|
||
"Source": "CVE"
|
||
}
|
||
],
|
||
"Description": "This update upgrades libgcrypt to version 1.6.6-alt1. \nSecurity Fix(es):\n\n * BDU:2019-01635: Уязвимость генератора псевдослучайных чисел библиотеки криптографии Libgcrypt, связанная с раскрытием информации, позволяющая нарушителю прогнозировать выходные данные\n\n * CVE-2016-6313: The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.",
|
||
"Advisory": {
|
||
"From": "errata.altlinux.org",
|
||
"Severity": "Low",
|
||
"Rights": "Copyright 2024 BaseALT Ltd.",
|
||
"Issued": {
|
||
"Date": "2016-08-18"
|
||
},
|
||
"Updated": {
|
||
"Date": "2016-08-18"
|
||
},
|
||
"BDUs": [
|
||
{
|
||
"ID": "BDU:2019-01635",
|
||
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
|
||
"CVSS3": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||
"CWE": "CWE-200",
|
||
"Href": "https://bdu.fstec.ru/vul/2019-01635",
|
||
"Impact": "Low",
|
||
"Public": "20160817"
|
||
}
|
||
],
|
||
"CVEs": [
|
||
{
|
||
"ID": "CVE-2016-6313",
|
||
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
|
||
"CVSS3": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||
"CWE": "CWE-200",
|
||
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2016-6313",
|
||
"Impact": "Low",
|
||
"Public": "20161213"
|
||
}
|
||
],
|
||
"AffectedCPEs": {
|
||
"CPEs": [
|
||
"cpe:/o:alt:container:11"
|
||
]
|
||
}
|
||
}
|
||
},
|
||
"Criteria": {
|
||
"Operator": "AND",
|
||
"Criterions": [
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:3001",
|
||
"Comment": "ALT Linux must be installed"
|
||
}
|
||
],
|
||
"Criterias": [
|
||
{
|
||
"Operator": "OR",
|
||
"Criterions": [
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:20161864001",
|
||
"Comment": "gcrypt-utils is earlier than 0:1.6.6-alt1"
|
||
},
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:20161864002",
|
||
"Comment": "i586-libgcrypt-devel is earlier than 0:1.6.6-alt1"
|
||
},
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:20161864003",
|
||
"Comment": "i586-libgcrypt-devel-static is earlier than 0:1.6.6-alt1"
|
||
},
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:20161864004",
|
||
"Comment": "i586-libgcrypt20 is earlier than 0:1.6.6-alt1"
|
||
},
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:20161864005",
|
||
"Comment": "libgcrypt-devel is earlier than 0:1.6.6-alt1"
|
||
},
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:20161864006",
|
||
"Comment": "libgcrypt-devel-static is earlier than 0:1.6.6-alt1"
|
||
},
|
||
{
|
||
"TestRef": "oval:org.altlinux.errata:tst:20161864007",
|
||
"Comment": "libgcrypt20 is earlier than 0:1.6.6-alt1"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
}
|
||
]
|
||
} |