Fedora 43 : openttd (2026-dd8314c4f3)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2026-dd8314c4f3
#

include('compat.inc');

if (description)
{
  script_id(297641);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/03");
  script_xref(name:"FEDORA", value:"2026-dd8314c4f3");

  script_name(english:"Fedora 43 : openttd (2026-dd8314c4f3)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Fedora host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the
FEDORA-2026-dd8314c4f3 advisory.

    ## 15.x

    ### 15.1 (2026-01-24)

    - Fix #15088: When building a new train, the refit button state may be incorrect (#15162)
    - Fix #15160: Incorrect company names displayed in load game window (#15161)
    - Fix #15153: Wrong tile used to get bridge reservation overlay (#15154)
    - Fix #15116: Old cargo/industry sets without cargo translation table broken (#15150)
    - Fix: Possible crash converting company liveries in older savegames/scenarios (#15148)
    - Fix: Allow infinite water to be (de)selected when loading heightmap (#15146)
    - Fix: Tile suitability test for farm field no longer handled snow tiles (#15134)
    - Fix #15131: Trees no longer spread on partially snowy tiles (#15133)
    - Fix: Change tooltips to match change from checkboxes to switches (#15123)
    - Fix: [Script] Potential out of bounds array/string slice indexes (#15106)
    - Fix: [Script] Potential out of bounds indexed string access (#15106)
    - Fix: [Script] Check if array sort function modified array (#15106)
    - Fix #15069: World generation map edges GUI starts in an invalid state (#15082)
    - Fix #15079: Incorrect dates shown on town cargo history graph (#15080)
    - Fix #15067: Mark NewGRF settings as modified after moving by drag & drop (#15068)
    - Fix: Incorrect error message for aqueducts reaching northern map borders (#14974)
    - Fix: Standardize wording of GRF/NewGRF (#15059)
    - Fix #15046: Crash on loading game due to invalid group parents (#15049)
    - Fix: Disable_elrails handling with engines that use both RAIL and ELRL (#15045)
    - Fix: [Fluidsynth] Read settings from system and user config files if available (#15044)
    - Fix #15039: Name and version can disappear from content list (#15040)
    - Fix #15026: Remove incorrect info from base sounds tooltip (#15029)
    - Fix: [Script] Improve reporting of invalid GetAPIVersion return (#15015)
    - Fix: [Script] Undefined behaviour after calling SwapList during iteration (#14805)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://bodhi.fedoraproject.org/updates/FEDORA-2026-dd8314c4f3");
  script_set_attribute(attribute:"solution", value:
"Update the affected openttd package.");
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/01/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/01/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/02/03");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:43");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:openttd");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Fedora Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include('rpm2.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'Fedora' >!< os_product) audit(AUDIT_OS_NOT, 'Fedora');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'Fedora');
if (! preg(pattern:"^43([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'Fedora 43', 'Fedora ' + os_version);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Fedora', cpu);

var constraints = [
  {
    'release': '43',
    'pkgs': [
      {'reference':'openttd-15.1-1.fc43', 'rpm_spec_vers_cmp':TRUE}
    ]
  }
];

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }
  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        ## (no known rpm to check OR known rpm_exists)
        (!exists_check || rpm_exists(rpm:exists_check)) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'openttd');
}