Fedora 20 : ibus-chewing-1.4.10.1-1.fc20 (2014-1908)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2014-1908.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(72448);
  script_version("1.7");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");

  script_cve_id("CVE-2013-4509");
  script_bugtraq_id(63516);
  script_xref(name:"FEDORA", value:"2014-1908");

  script_name(english:"Fedora 20 : ibus-chewing-1.4.10.1-1.fc20 (2014-1908)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"  - Resolves Bug 1054937 - Broken %defattr in ibus-chewing

    - Fix Build for RHEL7

    - Resolves Bug 1013977 - ibus-chewing needs to have ibus
      write-cache --system in %post and %postun

    - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [rhel-7.0]

    - Resolves Bug 1028911 - [zh_TW]'Chinese<->English'
      switch does not work when clicking on the Chewing menu
      list.

    - Resolves Bug 1045868 - ibus-chewing *again* not built
      with $RPM_OPT_FLAGS

    - Option 'Sync between caps lock and IM': + Default of
      is changed to 'disable', because the previous default
      'keyboard' cause bug 1028911 for GNOME Shell. + Now
      Sync from 'input method' can control Caps LED in GNOME
      shell.

  - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA

    - Set environment IBUS_CHEWING_LOGFILE for ibus-chewing
      log.

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

    - Resolves Bug 1013977 - ibus-chewing needs to have ibus
      write-cache --system in %post and %postun

    - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [rhel-7.0]

    - Resolves Bug 1028911 - [zh_TW]'Chinese<->English'
      switch does not work when clicking on the Chewing menu
      list.

    - Resolves Bug 1045868 - ibus-chewing *again* not built
      with $RPM_OPT_FLAGS

    - Option 'Sync between caps lock and IM': + Default of
      is changed to 'disable', because the previous default
      'keyboard' cause bug 1028911 for GNOME Shell. + Now
      Sync from 'input method' can control Caps LED in GNOME
      shell.

  - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA

    - Set environment IBUS_CHEWING_LOGFILE for ibus-chewing
      log.

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

    - Fix Build for RHEL7

    - Resolves Bug 1013977 - ibus-chewing needs to have ibus
      write-cache --system in %post and %postun

    - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [rhel-7.0]

    - Resolves Bug 1028911 - [zh_TW]'Chinese<->English'
      switch does not work when clicking on the Chewing menu
      list.

    - Resolves Bug 1045868 - ibus-chewing *again* not built
      with $RPM_OPT_FLAGS

    - Option 'Sync between caps lock and IM': + Default of
      is changed to 'disable', because the previous default
      'keyboard' cause bug 1028911 for GNOME Shell. + Now
      Sync from 'input method' can control Caps LED in GNOME
      shell.

  - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA

    - Set environment IBUS_CHEWING_LOGFILE for ibus-chewing
      log.

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

    - Resolves Bug 1013977 - ibus-chewing needs to have ibus
      write-cache --system in %post and %postun

    - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [rhel-7.0]

    - Resolves Bug 1028911 - [zh_TW]'Chinese<->English'
      switch does not work when clicking on the Chewing menu
      list.

    - Resolves Bug 1045868 - ibus-chewing *again* not built
      with $RPM_OPT_FLAGS

    - Option 'Sync between caps lock and IM': + Default of
      is changed to 'disable', because the previous default
      'keyboard' cause bug 1028911 for GNOME Shell. + Now
      Sync from 'input method' can control Caps LED in GNOME
      shell.

  - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA

    - Set environment IBUS_CHEWING_LOGFILE for ibus-chewing
      log.

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

    - Resolves Bug 842856 - ibus-chewing 1.4.3-1 not built
      with $RPM_OPT_FLAGS

    - Resolves Bug 1027030 - CVE-2013-4509 ibus-chewing:
      ibus: visible password entry flaw [fedora-all] Thanks
      czchen for the GitHub pull request 39.

  - Added translations: fr_FR, ja_JP, ko_KR

    - Adopt cmake-fedora-1.2.0

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=1013977"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=1027030"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=1028911"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=1045868"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=842856"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2014-February/128124.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?af62aad0"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected ibus-chewing package."
  );
  script_set_cvss_base_vector("CVSS2#AV:L/AC:M/Au:N/C:P/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ibus-chewing");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:20");

  script_set_attribute(attribute:"vuln_publication_date", value:"2013/11/23");
  script_set_attribute(attribute:"patch_publication_date", value:"2014/02/03");
  script_set_attribute(attribute:"plugin_publication_date", value:"2014/02/12");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2014-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^20([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 20.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC20", reference:"ibus-chewing-1.4.10.1-1.fc20")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());
  else security_note(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ibus-chewing");
}