openSUSE 16 Security Update : perl-IO-Compress (openSUSE-SU-2026:21177-1)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The package checks in this plugin were extracted from
# openSUSE Security Update openSUSE-SU-2026:21177-1. The text itself
# is copyright (C) SUSE.
##

include('compat.inc');

if (description)
{
  script_id(324886);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/02");

  script_cve_id("CVE-2026-48961", "CVE-2026-48962");

  script_name(english:"openSUSE 16 Security Update : perl-IO-Compress (openSUSE-SU-2026:21177-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote openSUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the
openSUSE-SU-2026:21177-1 advisory.

    Changes in perl-IO-Compress:

    - updated to 2.220.0 (2.220)
       see /usr/share/doc/packages/perl-IO-Compress/Changes

        2.220 16 May 2026
          * remove use of eval in globmapper. #73
            CVE-2026-48962 bsc#1266382
          * Update zipdetails to version 4.006.
            CVE-2026-48961 bsc#1266381
          * Fix typo in fastForward #72
          * Fix issue with rawdeflate` option in AnyInflate. #71

    - updated to 2.219.0 (2.219)
       see /usr/share/doc/packages/perl-IO-Compress/Changes

        2.219 9 March 2026
          * Fix a few  typos
          * Squash repeated semicolons
          * Make dependent version checking consistent amd update module to version 2.219. Fixes #70
        2.218 8 March 2026
          * Refresh zipdetails to version 4.005 Sourced from https://github.com/pmqs/zipdetails
          * version 2.218
          * Add SECURITY.md,  Fixes #69
          * fix spelling typo
          * Refresh Changes file
          * Update release date in README
          * Refresh zipdetails from https://github.com/pmqs/zipdetails
        2.217 1 February 2026
          * Update release date in README
          * Refresh zipdetails from https://github.com/pmqs/zipdetails
          * Delete GZIP environment variable before running interop tests Fixes #24
          * Update version to 2.217
        2.216 31 January 2026
            * Update version to 2.216
            * IO::Compress @2.215: t/006zip.t fails due to missing test files #67
        2.215 31 January 2026
            * Fix version check in 000prereq.t
            * Update Changes for 2.215
            * Update version to 2.215 & change copyright year to 2026
            * Add tests for handling zero and invalid datetime values in unzip functionality. Fix for #65
            * Enhance _dosToUnixTime to handle zero and invalid datetime values; add tests for edge cases.
    Fixes #65

    - updated to 2.214.0 (2.214)
       see /usr/share/doc/packages/perl-IO-Compress/Changes

        2.214 24 October 2025
            * version 2.214
            * IO::Compress::Gzip accidentally modifies the `$EXPORT_TAGS{all}->@*` of other modules Fixes #64
            * Fix indentation in Windows workflow YAML
            * Fix indentation in windows.yml exclude section
            * Merge pull request #63 from masiuchi/fix/ci-errors
            * Exclude Perl 5.42 with strawberry distribution from GitHub Actions
            * Update FreeBSD image to 14.3 in Cirrus CI
            * Add dependabot.yml file to police workflow files
            * Add perl 5.42 to workflow files
            * Fix for https://github.com/pmqs/Compress-Raw-Zlib/issues/34
            * #59 fix typos in streamzip

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1266381");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/1266382");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-48961");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2026-48962");
  script_set_attribute(attribute:"solution", value:
"Update the affected perl-IO-Compress package.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-48962");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/05/27");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/06/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/02");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-IO-Compress");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:16.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/SuSE/release');
if (isnull(os_release) || os_release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, 'openSUSE');
var _os_ver = pregmatch(pattern: "^SUSE([\d.]+)", string:os_release);
if (isnull(_os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'openSUSE');
_os_ver = _os_ver[1];
if (os_release !~ "^(SUSE16\.0)$") audit(AUDIT_OS_RELEASE_NOT, 'openSUSE', '16.0', os_release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'openSUSE ' + _os_ver, cpu);

var pkgs = [
    {'reference':'perl-IO-Compress-2.220.0-bp160.1.1', 'release':'SUSE16.0', 'rpm_spec_vers_cmp':TRUE}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var reference = NULL;
  var _release = NULL;
  var _cpu = NULL;
  var rpm_spec_vers_cmp = NULL;
  if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
  if (!empty_or_null(package_array['release'])) _release = package_array['release'];
  if (!empty_or_null(package_array['cpu'])) cpu = package_array['cpu'];
  if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
  if (reference && _release) {
    if (rpm_check(release:_release, cpu:_cpu, reference:reference, rpm_spec_vers_cmp:rpm_spec_vers_cmp)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'perl-IO-Compress');
}