Update to Chromium 55.
Security fix for CVE-2016-5199, CVE-2016-5200, CVE-2016-5201, CVE-2016-5202, CVE-2016-9651, CVE-2016-5208, CVE-2016-5207, CVE-2016-5206, CVE-2016-5205, CVE-2016-5204, CVE-2016-5209, CVE-2016-5203, CVE-2016-5210, CVE-2016-5212, CVE-2016-5211, CVE-2016-5213, CVE-2016-5214, CVE-2016-5216, CVE-2016-5215, CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5221, CVE-2016-5220, CVE-2016-5222, CVE-2016-9650, CVE-2016-5223, CVE-2016-5226, CVE-2016-5225, CVE-2016-5224, CVE-2016-9652
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2016-a815b7bf5d.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(95903);
script_version("3.15");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/11");
script_cve_id("CVE-2016-5199", "CVE-2016-5200", "CVE-2016-5201", "CVE-2016-5202", "CVE-2016-5203", "CVE-2016-5204", "CVE-2016-5205", "CVE-2016-5206", "CVE-2016-5207", "CVE-2016-5208", "CVE-2016-5209", "CVE-2016-5210", "CVE-2016-5211", "CVE-2016-5212", "CVE-2016-5213", "CVE-2016-5214", "CVE-2016-5215", "CVE-2016-5216", "CVE-2016-5217", "CVE-2016-5218", "CVE-2016-5219", "CVE-2016-5220", "CVE-2016-5221", "CVE-2016-5222", "CVE-2016-5223", "CVE-2016-5224", "CVE-2016-5225", "CVE-2016-5226", "CVE-2016-9650", "CVE-2016-9651", "CVE-2016-9652");
script_xref(name:"FEDORA", value:"2016-a815b7bf5d");
script_name(english:"Fedora 25 : chromium (2016-a815b7bf5d)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
"Update to Chromium 55.
Security fix for CVE-2016-5199, CVE-2016-5200, CVE-2016-5201,
CVE-2016-5202, CVE-2016-9651, CVE-2016-5208, CVE-2016-5207,
CVE-2016-5206, CVE-2016-5205, CVE-2016-5204, CVE-2016-5209,
CVE-2016-5203, CVE-2016-5210, CVE-2016-5212, CVE-2016-5211,
CVE-2016-5213, CVE-2016-5214, CVE-2016-5216, CVE-2016-5215,
CVE-2016-5217, CVE-2016-5218, CVE-2016-5219, CVE-2016-5221,
CVE-2016-5220, CVE-2016-5222, CVE-2016-9650, CVE-2016-5223,
CVE-2016-5226, CVE-2016-5225, CVE-2016-5224, CVE-2016-9652
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bodhi.fedoraproject.org/updates/FEDORA-2016-a815b7bf5d"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected chromium package."
);
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"exploited_by_malware", value:"true");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:chromium");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:25");
script_set_attribute(attribute:"vuln_publication_date", value:"2017/01/19");
script_set_attribute(attribute:"patch_publication_date", value:"2016/12/15");
script_set_attribute(attribute:"plugin_publication_date", value:"2016/12/16");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2016-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^25([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 25", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC25", reference:"chromium-55.0.2883.87-1.fc25")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_HOLE,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "chromium");
}
Vendor | Product | Version | CPE |
---|---|---|---|
fedoraproject | fedora | chromium | p-cpe:/a:fedoraproject:fedora:chromium |
fedoraproject | fedora | 25 | cpe:/o:fedoraproject:fedora:25 |
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5199
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5200
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5201
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5202
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5203
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5204
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5205
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5206
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5207
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5208
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5209
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5210
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5211
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5212
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5213
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5214
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5215
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5216
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5217
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5218
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5219
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5220
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5221
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5222
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5223
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5224
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5225
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5226
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9650
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9651
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9652
bodhi.fedoraproject.org/updates/FEDORA-2016-a815b7bf5d