Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-38473: A reachable assertion was found in avahi_alternative_host_name.
Fixed packages 23
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | avahi | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-autoipd | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-compat-howl | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-compat-howl-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-compat-libdns_sd | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-compat-libdns_sd-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-debuginfo | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-dnsconfd | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-glib | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-glib-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-gobject | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-gobject-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-libs | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-qt3 | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-qt3-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-qt4 | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-qt4-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-tools | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-ui | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-ui-devel | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-ui-gtk3 | 0:0.6.31-20.amzn2.0.4 |
| Amazon Linux · 2 | avahi-ui-tools | 0:0.6.31-20.amzn2.0.4 |
Vulnerabilities 1
-
Medium 6.2
Reachable assertion in avahi_alternative_host_name
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-38473.html