Fedora 23 : php-horde-Horde-Service-Weather-2.3.1-1.fc23 / php-horde-Horde-Core-2.22.4-1.fc23 / etc (2015-a3c9048cdd)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2015-a3c9048cdd.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(89352);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");

  script_xref(name:"FEDORA", value:"2015-a3c9048cdd");

  script_name(english:"Fedora 23 : php-horde-Horde-Service-Weather-2.3.1-1.fc23 / php-horde-Horde-Core-2.22.4-1.fc23 / etc (2015-a3c9048cdd)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"**Horde_Core 2.22.4** * [mjr] SECURITY: Fix XSS in
Horde_Core_VarRenderer_Html (reported by Centurion Information
Security). * [mjr] Support sending MDN via ActiveSync (Request
#23080). **Horde_Core 2.22.3** * [mjr] Fix issue with synchronizing
IMAP folder names that contain only numbers. **Horde_Perms 2.1.6** *
[mjr] Use NULL instead of an empty string in the perms_parents field
for root permissions. **Horde_Service_Weather 2.3.1** * [jan] Fix
undefined variable warnings.

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2015-December/174493.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?68ca9db4"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2015-December/174494.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?3999e4bb"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2015-December/174495.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?8e1996c3"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"Update the affected php-horde-Horde-Core, php-horde-Horde-Perms and /
or php-horde-Horde-Service-Weather packages."
  );
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php-horde-Horde-Core");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php-horde-Horde-Perms");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php-horde-Horde-Service-Weather");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:23");

  script_set_attribute(attribute:"patch_publication_date", value:"2015/12/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2016/03/04");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2016-2021 Tenable Network Security, Inc.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^23([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 23.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC23", reference:"php-horde-Horde-Core-2.22.4-1.fc23")) flag++;
if (rpm_check(release:"FC23", reference:"php-horde-Horde-Perms-2.1.6-1.fc23")) flag++;
if (rpm_check(release:"FC23", reference:"php-horde-Horde-Service-Weather-2.3.1-1.fc23")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php-horde-Horde-Core / php-horde-Horde-Perms / etc");
}