Summary
[0.7-21.1]
- Fix CVE-2021-3468 (#1939614)
- Fix CVE-2023-38469 (#2191687)
- Fix CVE-2023-38470 (#2191694)
- Fix CVE-2023-38471 (#2191690)
- Fix CVE-2023-38472 (#2191692)
- Fix CVE-2023-38473 (#2191691)
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | avahi | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-autoipd | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-compat-howl | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-compat-howl-devel | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-compat-libdns_sd | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-compat-libdns_sd-devel | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-devel | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-glib | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-glib-devel | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-gobject | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-gobject-devel | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-libs | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-tools | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-ui | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-ui-devel | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | avahi-ui-gtk3 | 0:0.7-21.el8_9.1 |
| Oracle Linux · 8 | python3-avahi | 0:0.7-21.el8_9.1 |
Vulnerabilities 6
-
Medium 6.2
Reachable assertion in avahi_dns_packet_append_record
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
-
Medium 6.2
Reachable assertion in avahi_escape_label
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
-
Medium 6.2
Reachable assertion in dbus_set_host_name
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
-
Medium 6.2
Reachable assertion in avahi_rdata_parse
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
-
Medium 6.2
Reachable assertion in avahi_alternative_host_name
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
-
Unscored —
A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection …