Fedora 27 : systemd (2017-6263c938c7)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2017-6263c938c7.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(105891);
  script_version("3.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/06");

  script_xref(name:"FEDORA", value:"2017-6263c938c7");

  script_name(english:"Fedora 27 : systemd (2017-6263c938c7)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"  - Use infinite timeouts for passwords during boot when
    JobTimeoutSec=0

  - Some tty utf8-mode fixes

  - Only send one auxillary fd set over dbus

  - Various network-manager crash and spurious assert fixes

  - Do not remount network filesystems ro during shutdown
    and unmount DM devices better

  - Fix cryptsetup devices disappearing when used for btrfs

  - Fix assertions messages sometimes not appearing during
    bootup/shutdown

  - Fix passing arguments over ssh (-H)

  - Fix networks crash on MTU changes

  - Respect delay inhibitors in scheduled shutdowns using
    logind

  - Send resume signal on failed sleep/shutdown from logind
    (#1476313)

  - Make tmpfiles treat various errors more leniently and
    ignore autofs paths

  - Load virtio_rng early

  - Fix cryptsetup generator usage in initramfs

  - Fix mounting of APIFSs using systemd-mount

  - Fix rfkill on some thinkpads

  - Fix masking of template units

  - Honour quiet flag in more places

  - Fix crash when removing EFI variables

  - Fix handling of persistent timer timestamps from the
    future

  - Extend dbus timeouts to handle slow dbus daemon startup

  - Allow lines of unlimited length in configuration files

  - Fix starting of units in emergency mode

  - Make environment variable validation allow all shell
    variables

  - Fix systemd-networkd issues when LinkLocalAddressing=no
    and DHCPServer=no

  - Fix assertion triggered in timedatectl under Iranian
    locale

  - Fix systemd-resolved DOS with crafted NSEC packets
    (LP#1725351)

  - Backport /etc/crypttab _netdev feature from upstream

(No need to reboot.)

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2017-6263c938c7"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected systemd package."
  );
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:systemd");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:27");

  script_set_attribute(attribute:"vuln_publication_date", value:"2017/11/11");
  script_set_attribute(attribute:"patch_publication_date", value:"2017/11/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2018/01/15");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2018-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^27([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 27", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC27", reference:"systemd-234-9.fc27")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "systemd");
}