Fedora 28 : php (2018-9438795217)

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2018-9438795217.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(120629);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/06");

  script_xref(name:"FEDORA", value:"2018-9438795217");

  script_name(english:"Fedora 28 : php (2018-9438795217)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"**PHP version 7.2.8** (19 Jul 2018)

**Core:**

  - Fixed bug php#76534 (PHP hangs on 'illegal string offset
    on string references with an error handler). (Laruence)

  - Fixed bug php#76520 (Object creation leaks memory when
    executed over HTTP). (Nikita)

  - Fixed bug php#76502 (Chain of mixed exceptions and
    errors does not serialize properly). (Nikita)

**Date:**

  - Fixed bug php#76462 (Undefined property:
    DateInterval::$f). (Anatol)

**EXIF:**

  - Fixed bug php#76409 (heap use after free in
    _php_stream_free). (cmb)

  - Fixed bug php#76423 (Int Overflow lead to Heap OverFlow
    in exif_thumbnail_extract of exif.c). (Stas)

  - Fixed bug php#76557 (heap-buffer-overflow (READ of size
    48) while reading exif data). (Stas)

**FPM:**

  - Fixed bug php#73342 (Vulnerability in php-fpm by
    changing stdin to non-blocking). (Nikita)

**GMP:**

  - Fixed bug php#74670 (Integer Underflow when
    unserializing GMP and possible other classes). (Nikita)

**intl:**

  - Fixed bug php#76556 (get_debug_info handler for
    BreakIterator shows wrong type). (cmb)

**mbstring:**

  - Fixed bug php#76532 (Integer overflow and excessive
    memory usage in mb_strimwidth). (MarcusSchwarz)

**Opcache:**

  - Fixed bug php#76477 (Opcache causes empty return value).
    (Nikita, Laruence)

**PGSQL:**

  - Fixed bug php#76548 (pg_fetch_result did not fetch the
    next row). (Anatol)

**phpdbg:**

  - Fix arginfo wrt. optional/required parameters. (cmb)

**Reflection:**

  - Fixed bug php#76536 (PHP crashes with core dump when
    throwing exception in error handler). (Laruence)

  - Fixed bug php#75231 (ReflectionProperty#getValue()
    incorrectly works with inherited classes). (Nikita)

**Standard:**

  - Fixed bug php#76505 (array_merge_recursive() is
    duplicating sub-array keys). (Laruence)

  - Fixed bug php#71848 (getimagesize with $imageinfo
    returns false). (cmb)

**Win32:**

  - Fixed bug php#76459 (windows linkinfo lacks openbasedir
    check). (Anatol)

**ZIP:**

  - Fixed bug php#76461 (OPSYS_Z_CPM defined instead of
    OPSYS_CPM). (Dennis Birkholz, Remi)

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2018-9438795217"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected php package.");
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:28");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/07/27");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/07/27");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/01/03");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^28([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 28", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC28", reference:"php-7.2.8-1.fc28")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php");
}