Test ID:	1.3.6.1.4.1.25623.1.1.13.2013.215.01
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2013-215-01)
Summary:	The remote host is missing an update for the 'gnupg' package(s) announced via the SSA:2013-215-01 advisory.
Description:	Summary: The remote host is missing an update for the 'gnupg' package(s) announced via the SSA:2013-215-01 advisory. Vulnerability Insight: New gnupg and libgcrypt packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. New libgpg-error packages are also available for Slackware 13.1 and older as the supplied version wasn't new enough to compile the fixed version of libgcrypt. Here are the details from the Slackware 14.0 ChangeLog: +--------------------------+ patches/packages/gnupg-1.4.14-i486-1_slack14.0.txz: Upgraded. Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. For more information, see: [links moved to references] (* Security fix *) patches/packages/libgcrypt-1.5.3-i486-1_slack14.0.txz: Upgraded. Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA secret keys. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'gnupg' package(s) on Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware 14.0, Slackware current. Solution: Please install the updated package(s). CVSS Score: 1.9 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4242 BugTraq ID: 61464 http://www.securityfocus.com/bid/61464 CERT/CC vulnerability note: VU#976534 http://www.kb.cert.org/vuls/id/976534 Debian Security Information: DSA-2730 (Google Search) http://www.debian.org/security/2013/dsa-2730 Debian Security Information: DSA-2731 (Google Search) http://www.debian.org/security/2013/dsa-2731 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880 http://eprint.iacr.org/2013/448 http://lists.gnupg.org/pipermail/gnupg-announce/2013q3/000330.html RedHat Security Advisories: RHSA-2013:1457 http://rhn.redhat.com/errata/RHSA-2013-1457.html http://secunia.com/advisories/54318 http://secunia.com/advisories/54321 http://secunia.com/advisories/54332 http://secunia.com/advisories/54375 SuSE Security Announcement: openSUSE-SU-2013:1294 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-08/msg00003.html http://www.ubuntu.com/usn/USN-1923-1
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.