Summary
[0.8-22]
- Fix CVE-2024-52616 (RHEL-67722)
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | avahi | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-autoipd | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-compat-howl | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-compat-howl-devel | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-compat-libdns_sd | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-compat-libdns_sd-devel | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-devel | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-glib | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-glib-devel | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-gobject | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-gobject-devel | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-libs | 0:0.8-22.el9_6 |
| Oracle Linux · 9 | avahi-tools | 0:0.8-22.el9_6 |
Vulnerabilities 1
-
Medium 5.3
Avahi: avahi wide-area dns predictable transaction ids
A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.