feat(detect/redhat): detect unpatched vulnerabilities with oval, stop using gost

[MaineK00n]

What did you implement:

Fixes #1906

Type of change

• Breaking change (fix or feature that would cause existing functionality to not work as expected)

How Has This Been Tested?

vuls scan json: https://github.com/future-architect/vuls/files/15201332/vagrant.json

before

$ vuls report
[May  8 02:20:32]  INFO [localhost] vuls-v0.25.2-build-20240508_021813_f3f6671
...
vagrant (redhat8.9)
===================
Total: 382 (Critical:5 High:105 Medium:249 Low:13 ?:10)
72/382 Fixed, 43 poc, 0 exploits, cisa: 0, uscert: 0, jpcert: 0 alerts
522 installed

+----------------+------+--------+-----+-----------+---------+--------------------------------+
|     CVE-ID     | CVSS | ATTACK | POC |   ALERT   |  FIXED  |            PACKAGES            |
+----------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-2163  | 10.0 |  AV:L  |     |           |   fixed | kernel, kernel-core,           |
|                |      |        |     |           |         | kernel-devel, kernel-headers,  |
|                |      |        |     |           |         | kernel-modules, kernel-tools,  |
|                |      |        |     |           |         | kernel-tools-libs,             |
|                |      |        |     |           |         | python3-perf                   |
+----------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2019-15505 |  9.8 |  AV:L  |     |           | unfixed | kernel                         |
+----------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-25775 |  9.8 |  AV:N  |     |           | unfixed | kernel                         |
+----------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-37920 |  9.8 |  AV:N  |     |           | unfixed | ca-certificates                |
+----------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-45871 |  9.8 |  AV:A  |     |           |   fixed | kernel, kernel-core,           |
|                |      |        |     |           |         | kernel-devel,                  |
|                |      |        |     |           |         | kernel-modules, kernel-tools,  |
|                |      |        |     |           |         | kernel-tools-libs,             |
|                |      |        |     |           |         | python3-perf                   |
+----------------+------+--------+-----+-----------+---------+--------------------------------+
...

after

$ vuls report
[May  8 02:12:44]  INFO [localhost] vuls-v0.25.2-build-20240508_021057_d679160
...
vagrant (redhat8.9)
===================
Total: 410 (Critical:6 High:115 Medium:273 Low:14 ?:2)
71/410 Fixed, 65 poc, 0 exploits, cisa: 0, uscert: 0, jpcert: 0 alerts
522 installed

+----------------+------+--------+-----+-----------+---------+----------------------------------------+
|     CVE-ID     | CVSS | ATTACK | POC |   ALERT   |  FIXED  |                PACKAGES                |
+----------------+------+--------+-----+-----------+---------+----------------------------------------+
| CVE-2023-2163  | 10.0 |  AV:L  |     |           |   fixed | kernel, kernel-core,                   |
|                |      |        |     |           |         | kernel-devel, kernel-headers,          |
|                |      |        |     |           |         | kernel-modules, kernel-tools,          |
|                |      |        |     |           |         | kernel-tools-libs,                     |
|                |      |        |     |           |         | python3-perf                           |
+----------------+------+--------+-----+-----------+---------+----------------------------------------+
| CVE-2019-15505 |  9.8 |  AV:L  |     |           | unfixed | kernel, kernel-core,                   |
|                |      |        |     |           |         | kernel-devel, kernel-headers,          |
|                |      |        |     |           |         | kernel-modules, kernel-tools,          |
|                |      |        |     |           |         | kernel-tools-libs,                     |
|                |      |        |     |           |         | python3-perf                           |
+----------------+------+--------+-----+-----------+---------+----------------------------------------+
| CVE-2020-20703 |  9.8 |  AV:L  | POC |           | unfixed | vim-common, vim-enhanced,              |
|                |      |        |     |           |         | vim-filesystem, vim-minimal            |
+----------------+------+--------+-----+-----------+---------+----------------------------------------+
| CVE-2023-25775 |  9.8 |  AV:N  |     |           | unfixed | kernel, kernel-core,                   |
|                |      |        |     |           |         | kernel-devel, kernel-headers,          |
|                |      |        |     |           |         | kernel-modules, kernel-tools,          |
|                |      |        |     |           |         | kernel-tools-libs,                     |
|                |      |        |     |           |         | python3-perf                           |
+----------------+------+--------+-----+-----------+---------+----------------------------------------+
| CVE-2023-37920 |  9.8 |  AV:N  |     |           | unfixed | ca-certificates                        |
+----------------+------+--------+-----+-----------+---------+----------------------------------------+
| CVE-2023-45871 |  9.8 |  AV:A  |     |           |   fixed | kernel, kernel-core,                   |
|                |      |        |     |           |         | kernel-devel,                          |
|                |      |        |     |           |         | kernel-modules, kernel-tools,          |
|                |      |        |     |           |         | kernel-tools-libs,                     |
|                |      |        |     |           |         | python3-perf                           |
+----------------+------+--------+-----+-----------+---------+----------------------------------------+

...

Checklist:

You don't have to satisfy all of the following.

• Write tests
• Write documentation
• Check that there aren't other open pull requests for the same issue/feature
• Format your source code by make fmt
• Pass the test by make test
• Provide verification config / commands
• Enable "Allow edits from maintainers" for this PR
• Update the messages below

Is this ready for review?: YES

Reference

[shino]

Great Work! Fabulous! And lots of thanks for your support in my review time!!

[shino]

Just for memo: vulsio/goval-dictionary#388