A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.

This update for gwenhywfar fixes the following issues :

Security issue fixed :

  - CVE-2015-7542: Make use of the system's default trusted     CAs. Also remove the upstream provided ca-bundle.crt     file and require ca-certificates so the /etc/ssl/certs     directory is populated (bsc#958331).

This update was imported from the SUSE:SLE-12:Update update project.

This update for gwenhywfar fixes the following issues: Security issue fixed :

  - CVE-2015-7542: Make use of the system's default trusted     CAs. Also remove the upstream provided ca-bundle.crt     file and require ca-certificates so the /etc/ssl/certs     directory is populated (bsc#958331).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that libgwenhywfar (an OS abstraction layer that allows porting of software to different operating systems like Linux,

*BSD, Windows etc.) used an outdated CA certificate bundle.

For Debian 7 'Wheezy', this issue has been fixed in libgwenhywfar version 4.3.3-1+deb7u1 by utilising the ca-certificates package.

We recommend that you upgrade your libgwenhywfar packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This adjusts gwenhywfar to use the system copy of ca-certificates, instead of a bundled copy.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
106066	openSUSE Security Update : gwenhywfar (openSUSE-2018-37)	Nessus	SuSE Local Security Checks	medium
106042	SUSE SLED12 Security Update : gwenhywfar (SUSE-SU-2018:0072-1)	Nessus	SuSE Local Security Checks	medium
91109	Debian DLA-469-1 : libgwenhywfar security update	Nessus	Debian Local Security Checks	medium
89182	Fedora 23 : gwenhywfar-4.13.1-5.fc23 (2015-277cc63d9f)	Nessus	Fedora Local Security Checks	high
89173	Fedora 22 : gwenhywfar-4.13.1-5.fc22 (2015-20df66892b)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2015-7542

medium

Tenable Plugins

medium

medium

medium

high

high