Test ID:	1.3.6.1.4.1.25623.1.1.10.2015.0359
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2015-0359)
Summary:	The remote host is missing an update for the 'gnupg, gnupg2' package(s) announced via the MGASA-2015-0359 advisory.
Description:	Summary: The remote host is missing an update for the 'gnupg, gnupg2' package(s) announced via the MGASA-2015-0359 advisory. Vulnerability Insight: Updated gnupg and gnupg2 packages fix security vulnerabilities: Hanno Bock discovered that GnuPG incorrectly handled certain malformed keyrings. If a user or automated system were tricked into opening a malformed keyring, a remote attacker could use this issue to cause GnuPG to crash, resulting in a denial of service, or possibly execute arbitrary code (CVE-2015-1606, CVE-2015-1607). Affected Software/OS: 'gnupg, gnupg2' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1606 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=f0f71a721ccd7ab9e40b8b6b028b59632c0cc648 http://www.debian.org/security/2015/dsa-3184 http://www.openwall.com/lists/oss-security/2015/02/13/14 http://www.openwall.com/lists/oss-security/2015/02/14/6 http://www.securitytracker.com/id/1031876 https://blog.fuzzing-project.org/5-Multiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html Common Vulnerability Exposure (CVE) ID: CVE-2015-1607 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=2183683bd633818dd031b090b5530951de76f392 http://www.securityfocus.com/bid/72610 http://www.ubuntu.com/usn/usn-2554-1/ https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000361.html https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000362.html https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.