Fedora 29 : icedtea-web (2019-efb92eed7a)

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory FEDORA-2019-efb92eed7a.
#

include("compat.inc");

if (description)
{
  script_id(127536);
  script_version("1.2");
  script_cvs_date("Date: 2019/09/23 11:21:12");

  script_xref(name:"FEDORA", value:"2019-efb92eed7a");

  script_name(english:"Fedora 29 : icedtea-web (2019-efb92eed7a)");
  script_summary(english:"Checks rpm output for the updated package.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"fixed CVEs 2019-10181, 2019-10182, 2019-10185

----

Updated to fres upstream release :

https://mail.openjdk.java.net/pipermail/distro-pkg-dev/2019-March/0413
20.html

New in release 1.8 (2019-03-12) :

  - added support for javafx-desc and so allwong run of
    pure-javafx only applications

  - --nosecurity enhanced for possibility to skip invalid
    signatures

  - enhanced to allow resources to be read also from
    j2se/java element (OmegaT)

  - PR3644 - java.lang.NoClassDefFoundError: Could not
    initialize class
    net.sourceforge.jnlp.runtime.JNLPRuntime$DeploymentConfi
    gurationHolder

  - deployment.config now support generic url instead just
    file

  - Added support for windows desktop shortcuts via
    https://github.com/DmitriiShamrikov/mslinks

  - cache can now be operated by groups, list by -Xcacheids
    (details via -verbose, can filter by regex), Xclearcache
    now can clear only selected id. There is also gui to
    operate cache via id in itweb-settings now.

  - desktop shortcut name get shortened to title or file if
    title is missing.

  - shared native launchers

  - scripted launchers rework: Windows bat launchers
    rewritten to be feature complete, Linux shell launchers
    made portable, build enhanced to produce platform
    independent image

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as
possible without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bodhi.fedoraproject.org/updates/FEDORA-2019-efb92eed7a"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected icedtea-web package."
  );
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:icedtea-web");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:29");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/08/11");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/08/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/08/12");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! preg(pattern:"^29([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 29", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);


flag = 0;
if (rpm_check(release:"FC29", reference:"icedtea-web-1.8-3.fc29")) flag++;


if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "icedtea-web");
}