Fix hang in flush_accept (#1702358)
Fix handling of RUN keys in udevd
Some documentation and minor logging fixes
Backport the addition of RestrictSUIDSGID= from systemd-242 and enable RestrictSUIDSGID=yes for systemd services which use DynamicUser=yes (#1703356, CVE-2019-3843). The defaults in v242 were changed to enable RestrictSUIDSGID=yes if DynamicUser=yes is specified, but this backport doesn’t do this and RestrictSUIDSGID=yes has to be requested explicitly.
Maintainers of other services packages for Fedora should consider doing this.
No need to log out or reboot.
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2019-7322053e74.
#
include("compat.inc");
if (description)
{
script_id(124504);
script_version("1.5");
script_cvs_date("Date: 2019/09/23 11:21:10");
script_cve_id("CVE-2019-3843");
script_xref(name:"FEDORA", value:"2019-7322053e74");
script_name(english:"Fedora 30 : systemd (2019-7322053e74)");
script_summary(english:"Checks rpm output for the updated package.");
script_set_attribute(
attribute:"synopsis",
value:"The remote Fedora host is missing a security update."
);
script_set_attribute(
attribute:"description",
value:
" - Fix hang in flush_accept (#1702358)
- Fix handling of RUN keys in udevd
- Some documentation and minor logging fixes
- Backport the addition of RestrictSUIDSGID= from
systemd-242 and enable RestrictSUIDSGID=yes for systemd
services which use DynamicUser=yes (#1703356,
CVE-2019-3843). The defaults in v242 were changed to
enable RestrictSUIDSGID=yes if DynamicUser=yes is
specified, but this backport doesn't do this and
RestrictSUIDSGID=yes has to be requested explicitly.
Maintainers of other services packages for Fedora should
consider doing this.
No need to log out or reboot.
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
);
script_set_attribute(
attribute:"see_also",
value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-7322053e74"
);
script_set_attribute(
attribute:"solution",
value:"Update the affected systemd package."
);
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:systemd");
script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:30");
script_set_attribute(attribute:"vuln_publication_date", value:"2019/04/26");
script_set_attribute(attribute:"patch_publication_date", value:"2019/04/29");
script_set_attribute(attribute:"plugin_publication_date", value:"2019/05/02");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_family(english:"Fedora Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^30([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 30", "Fedora " + os_ver);
if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);
flag = 0;
if (rpm_check(release:"FC30", reference:"systemd-241-8.git9ef65cb.fc30")) flag++;
if (flag)
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : rpm_report_get()
);
exit(0);
}
else
{
tested = pkg_tests_get();
if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
else audit(AUDIT_PACKAGE_NOT_INSTALLED, "systemd");
}
Vendor | Product | Version | CPE |
---|---|---|---|
fedoraproject | fedora | systemd | p-cpe:/a:fedoraproject:fedora:systemd |
fedoraproject | fedora | 30 | cpe:/o:fedoraproject:fedora:30 |