Fedora Update for xml-security-c FEDORA-2018-a0d02065d0
2019-05-07T00:00:00
ID OPENVAS:1361412562310875818 Type openvas Reporter Copyright (C) 2019 Greenbone Networks GmbH Modified 2019-12-12T00:00:00
Description
The remote host is missing an update for the
# Copyright (C) 2019 Greenbone Networks GmbH
# Text descriptions are largely excerpted from the referenced
# advisory, and are Copyright (C) the respective author(s)
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.875818");
script_version("2019-12-12T12:03:08+0000");
# TODO: No CVE assigned yet.
script_tag(name:"cvss_base", value:"5.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:N/A:N");
script_tag(name:"last_modification", value:"2019-12-12 12:03:08 +0000 (Thu, 12 Dec 2019)");
script_tag(name:"creation_date", value:"2019-05-07 02:22:16 +0000 (Tue, 07 May 2019)");
script_name("Fedora Update for xml-security-c FEDORA-2018-a0d02065d0");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2019 Greenbone Networks GmbH");
script_family("Fedora Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC29");
script_xref(name:"FEDORA", value:"2018-a0d02065d0");
script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JR5YJJECN2NEJ2UR7FL3DXONO7QBIXQP");
script_tag(name:"summary", value:"The remote host is missing an update for the 'xml-security-c'
package(s) announced via the FEDORA-2018-a0d02065d0 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"The xml-security-c library is a C++ implementation of the XML Digital
Signature specification. The library makes use of the Apache XML project', s
Xerces-C XML Parser and Xalan-C XSLT processor. The latter is used for
processing XPath and XSLT transforms.");
script_tag(name:"affected", value:"'xml-security-c' package(s) on Fedora 29.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "FC29") {
if(!isnull(res = isrpmvuln(pkg:"xml-security-c", rpm:"xml-security-c~2.0.2~1.fc29", rls:"FC29"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if (__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
{"id": "OPENVAS:1361412562310875818", "type": "openvas", "bulletinFamily": "scanner", "title": "Fedora Update for xml-security-c FEDORA-2018-a0d02065d0", "description": "The remote host is missing an update for the ", "published": "2019-05-07T00:00:00", "modified": "2019-12-12T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310875818", "reporter": "Copyright (C) 2019 Greenbone Networks GmbH", "references": ["2018-a0d02065d0", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JR5YJJECN2NEJ2UR7FL3DXONO7QBIXQP"], "cvelist": [], "lastseen": "2019-12-13T14:39:42", "viewCount": 46, "enchantments": {"dependencies": {"references": [], "modified": "2019-12-13T14:39:42", "rev": 2}, "score": {"value": -0.4, "vector": "NONE", "modified": "2019-12-13T14:39:42", "rev": 2}, "vulnersScore": -0.4}, "pluginID": "1361412562310875818", "sourceData": "# Copyright (C) 2019 Greenbone Networks GmbH\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (C) the respective author(s)\n#\n# SPDX-License-Identifier: GPL-2.0-or-later\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.875818\");\n script_version(\"2019-12-12T12:03:08+0000\");\n # TODO: No CVE assigned yet.\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:N\");\n script_tag(name:\"last_modification\", value:\"2019-12-12 12:03:08 +0000 (Thu, 12 Dec 2019)\");\n script_tag(name:\"creation_date\", value:\"2019-05-07 02:22:16 +0000 (Tue, 07 May 2019)\");\n script_name(\"Fedora Update for xml-security-c FEDORA-2018-a0d02065d0\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2019 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC29\");\n\n script_xref(name:\"FEDORA\", value:\"2018-a0d02065d0\");\n script_xref(name:\"URL\", value:\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JR5YJJECN2NEJ2UR7FL3DXONO7QBIXQP\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'xml-security-c'\n package(s) announced via the FEDORA-2018-a0d02065d0 advisory.\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable package version is present on the target host.\");\n\n script_tag(name:\"insight\", value:\"The xml-security-c library is a C++ implementation of the XML Digital\nSignature specification. The library makes use of the Apache XML project', s\nXerces-C XML Parser and Xalan-C XSLT processor. The latter is used for\nprocessing XPath and XSLT transforms.\");\n\n script_tag(name:\"affected\", value:\"'xml-security-c' package(s) on Fedora 29.\");\n\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"qod_type\", value:\"package\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\nreport = \"\";\n\nif(release == \"FC29\") {\n\n if(!isnull(res = isrpmvuln(pkg:\"xml-security-c\", rpm:\"xml-security-c~2.0.2~1.fc29\", rls:\"FC29\"))) {\n report += res;\n }\n\n if(report != \"\") {\n security_message(data:report);\n } else if (__pkg_match) {\n exit(99);\n }\n exit(0);\n}\n\nexit(0);\n", "naslFamily": "Fedora Local Security Checks"}