Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-38471: A reachable assertion was found in dbus_set_host_name. CVE-2023-38470: A reachable assertion was found in avahi_escape_label. CVE-2023-38469: A reachable assertion was found in avahi_dns_packet_append_record.
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | avahi | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-autoipd | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-autoipd-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-compat-howl | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-compat-howl-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-compat-howl-devel | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-compat-libdns_sd | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-compat-libdns_sd-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-compat-libdns_sd-devel | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-debugsource | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-devel | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-dnsconfd | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-dnsconfd-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-glib | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-glib-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-glib-devel | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-gobject | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-gobject-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-gobject-devel | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-libs | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-libs-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-tools | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-tools-debuginfo | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-ui-devel | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-ui-gtk3 | 0:0.8-14.amzn2023.0.8 |
| Amazon Linux · 2023 | avahi-ui-gtk3-debuginfo | 0:0.8-14.amzn2023.0.8 |
Vulnerabilities 3
-
Medium 6.2
Reachable assertion in avahi_dns_packet_append_record
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
-
Medium 6.2
Reachable assertion in avahi_escape_label
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
-
Medium 6.2
Reachable assertion in dbus_set_host_name
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.