Fedora 28 : php (2019-efa799fd16)

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-efa799fd16.
#

include("compat.inc");

if (description)
{
  script_id(122862);
  script_version("1.2");
  script_cvs_date("Date: 2019/09/23 11:21:12");

  script_xref(name:"FEDORA", value:"2019-efa799fd16");

  script_name(english:"Fedora 28 : php (2019-efa799fd16)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"**PHP version 7.2.16** (07 Mar 2019)

**Core:**

  - Fixed bug php#77589 (Core dump using parse_ini_string
    with numeric sections). (Laruence)

  - Fixed bug php#77630 (rename() across the device may
    allow unwanted access during processing). (Stas)

**EXIF:**

  - Fixed bug php#77509 (Uninitialized read in
    exif_process_IFD_in_TIFF). (Stas)

  - Fixed bug php#77540 (Invalid Read on exif_process_SOFn).
    (Stas)

  - Fixed bug php#77563 (Uninitialized read in
    exif_process_IFD_in_MAKERNOTE). (Stas)

  - Fixed bug php#77659 (Uninitialized read in
    exif_process_IFD_in_MAKERNOTE). (Stas)

**PHAR:**

  - Fixed bug php#77396 (NULL pointer Dereference in
    phar_create_or_parse_filename). (bishop)

**SPL:**

  - Fixed bug php#51068 (DirectoryIterator glob:// don't
    support current path relative queries). (Ahmed Abdou)

  - Fixed bug php#77431 (openFile() silently truncates after
    a null byte). (cmb)

**Standard:**

  - Fixed bug php#77552 (Unintialized php_stream_statbuf in
    stat functions). (John Stevenson)

**MySQL**

  - Disabled LOCAL INFILE by default, can be enabled using
    php.ini directive mysqli.allow_local_infile for mysqli,
    or PDO::MYSQL_ATTR_LOCAL_INFILE attribute for pdo_mysql.
    (Darek Slusarczyk)

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-efa799fd16"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected php package.");
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:php");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:28");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/03/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/03/15");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/03/15");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^28([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 28", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC28", reference:"php-7.2.16-1.fc28")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php");
}