Fedora 30 : php (2019-3f4ba94260)

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-3f4ba94260.
#

include("compat.inc");

if (description)
{
  script_id(124487);
  script_version("1.2");
  script_cvs_date("Date: 2019/09/23 11:21:10");

  script_xref(name:"FEDORA", value:"2019-3f4ba94260");

  script_name(english:"Fedora 30 : php (2019-3f4ba94260)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"**PHP version 7.3.3** (07 Mar 2019)

**Core:**

  - Fixed bug php#77589 (Core dump using parse_ini_string
    with numeric sections). (Laruence)

  - Fixed bug php#77329 (Buffer Overflow via overly long
    Error Messages). (Dmitry)

  - Fixed bug php#77494 (Disabling class causes segfault on
    member access). (Dmitry)

  - Fixed bug php#77498 (Custom extension Segmentation fault
    when declare static property). (Nikita)

  - Fixed bug php#77530 (PHP crashes when parsing
    `(2)::class`). (Ekin)

  - Fixed bug php#77546 (iptcembed broken function).
    (gdegoulet)

  - Fixed bug php#77630 (rename() across the device may
    allow unwanted access during processing). (Stas)

**EXIF:**

  - Fixed bug php#77509 (Uninitialized read in
    exif_process_IFD_in_TIFF). (Stas)

  - Fixed bug php#77540 (Invalid Read on exif_process_SOFn).
    (Stas)

  - Fixed bug php#77563 (Uninitialized read in
    exif_process_IFD_in_MAKERNOTE). (Stas)

  - Fixed bug php#77659 (Uninitialized read in
    exif_process_IFD_in_MAKERNOTE). (Stas)

**Mbstring:**

  - Fixed bug php#77514 (mb_ereg_replace() with trailing
    backslash adds null byte). (Nikita)

**MySQL**

  - Disabled LOCAL INFILE by default, can be enabled using
    php.ini directive mysqli.allow_local_infile for mysqli,
    or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.
    (Darek Slusarczyk)

**OpenSSL:**

  - Fixed bug php#77390 (feof might hang on TLS streams in
    case of fragmented TLS records). (Abyl Valg, Jakub
    Zelenka)

**PHAR:**

  - Fixed bug php#77396 (NULL pointer Dereference in
    phar_create_or_parse_filename). (bishop)

  - Fixed bug php#77586 (phar_tar_writeheaders_int() buffer
    overflow). (bishop)

**phpdbg:**

  - Fixed bug php#76596 (phpdbg support for
    display_errors=stderr). (kabel)

**SPL:**

  - Fixed bug php#51068 (DirectoryIterator glob:// don't
    support current path relative queries). (Ahmed Abdou)

  - Fixed bug php#77431 (openFile() silently truncates after
    a null byte). (cmb)

**Standard:**

  - Fixed bug php#77552 (Unintialized php_stream_statbuf in
    stat functions). (John Stevenson)

  - Fixed bug php#77612 (setcookie() sets incorrect SameSite
    header if all of its options filled). (Nikita)

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-3f4ba94260"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected php package.");
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:30");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/03/29");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/03/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/05/02");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^30([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 30", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC30", reference:"php-7.3.3-1.fc30")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php");
}