Test ID:	1.3.6.1.4.1.25623.1.0.131288
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2016-0164)
Summary:	The remote host is missing an update for the 'javapackages-tools, xstream' package(s) announced via the MGASA-2016-0164 advisory.
Description:	Summary: The remote host is missing an update for the 'javapackages-tools, xstream' package(s) announced via the MGASA-2016-0164 advisory. Vulnerability Insight: Updated xstream packages fix security vulnerability: XStream (x-stream.github.io) is a Java library to marshal Java objects into XML and back. For this purpose it supports a lot of different XML parsers. Some of those can also process external entities which was enabled by default. An attacker could therefore provide manipulated XML as input to access data on the file system (CVE-2016-3674). Affected Software/OS: 'javapackages-tools, xstream' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3674 BugTraq ID: 85381 http://www.securityfocus.com/bid/85381 Debian Security Information: DSA-3575 (Google Search) http://www.debian.org/security/2016/dsa-3575 http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183208.html http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183180.html http://www.openwall.com/lists/oss-security/2016/03/25/8 http://www.openwall.com/lists/oss-security/2016/03/28/1 RedHat Security Advisories: RHSA-2016:2822 http://rhn.redhat.com/errata/RHSA-2016-2822.html RedHat Security Advisories: RHSA-2016:2823 http://rhn.redhat.com/errata/RHSA-2016-2823.html http://www.securitytracker.com/id/1036419
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.