Test ID:	1.3.6.1.4.1.25623.1.0.131218
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2016-0061)
Summary:	The remote host is missing an update for the 'nettle, nettle2.7' package(s) announced via the MGASA-2016-0061 advisory.
Description:	Summary: The remote host is missing an update for the 'nettle, nettle2.7' package(s) announced via the MGASA-2016-0061 advisory. Vulnerability Insight: Updated nettle2.7 and nettle packages fix security vulnerabilities: Two carry propagation bugs in elliptic curve scalar multiplications that affect the NIST P-256 curve. The bugs are in the C code and affect multiple architectures (CVE-2015-8803, CVE-2015-8805). A carry propagation bug in elliptic curve scalar multiplications that affect the NIST P-384 curve. The bug is in the assembly code and only affects the x86_64 architecture (CVE-2015-8804). Affected Software/OS: 'nettle, nettle2.7' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8803 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176807.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177473.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177229.html https://blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html https://lists.gnu.org/archive/html/info-gnu/2016-01/msg00006.html https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003028.html http://www.openwall.com/lists/oss-security/2016/02/02/2 http://www.openwall.com/lists/oss-security/2016/02/03/1 RedHat Security Advisories: RHSA-2016:2582 http://rhn.redhat.com/errata/RHSA-2016-2582.html SuSE Security Announcement: openSUSE-SU-2016:0475 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html SuSE Security Announcement: openSUSE-SU-2016:0477 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html SuSE Security Announcement: openSUSE-SU-2016:0486 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html http://www.ubuntu.com/usn/USN-2897-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-8804 https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003024.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8805 BugTraq ID: 84272 http://www.securityfocus.com/bid/84272
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.