Fedora 31 : bluez / iwd / libell (2019-17419b24a3)

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-17419b24a3.
#

include("compat.inc");

if (description)
{
  script_id(130986);
  script_version("1.1");
  script_cvs_date("Date: 2019/11/14");

  script_xref(name:"FEDORA", value:"2019-17419b24a3");

  script_name(english:"Fedora 31 : bluez / iwd / libell (2019-17419b24a3)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"bluez 5.52 :

  - improvements for bluetooth mesh

  - audio bug fixes

  - general bug fixes

----

ell 0.26 :

  - Fix issue with memory leak and TLS certificates.

  - Fix issue with buffer size and TLS PRF handling.

  - Add support for D-Bus non-root ObjectManager.

iwd 1.0 :

  - Add support for stable D-Bus interfaces.

  - Add support for network configuration documentation.

----

ell ver 0.25 :

  - Fix issue with stopping DHCP client and owner
    notification.

  - Fix issue with time calculation overflow and DHCP.

iwd ver 0.23 :

  - Fix issue with strict certificate chain checks.

  - Fix issue with parsing RSNE_ADVANCE information.

  - Fix issue with parsing RSN information for WPA1.

  - Fix issue with logic error in scan frequency validation.

  - Fix issue with integer overflow and authentication
    frames.

  - Add support for installing various manual pages.

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-17419b24a3"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected bluez, iwd and / or libell packages."
  );
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:bluez");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:iwd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:libell");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:31");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/13");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/11/13");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/11/14");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^31([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 31", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC31", reference:"bluez-5.52-1.fc31")) flag++;
if (rpm_check(release:"FC31", reference:"iwd-1.0-1.fc31")) flag++;
if (rpm_check(release:"FC31", reference:"libell-0.26-1.fc31")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "bluez / iwd / libell");
}