Red Hat Security Advisory: avahi security update

Fixed packages 52

Vulnerabilities 6

• Medium 6.2
  CVE-2023-38469

  Reachable assertion in avahi_dns_packet_append_record

  A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

  Red Hat Fedora avahi Red Hat Enterprise Linux 9 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Nov 2, 2023
• Medium 6.2
  CVE-2023-38470

  Reachable assertion in avahi_escape_label

  A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

  Red Hat Fedora avahi Red Hat Enterprise Linux 9 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Nov 2, 2023
• Medium 6.2
  CVE-2023-38471

  Reachable assertion in dbus_set_host_name

  A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

  Red Hat Fedora avahi Red Hat Enterprise Linux 9 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Nov 2, 2023
• Medium 6.2
  CVE-2023-38472

  Reachable assertion in avahi_rdata_parse

  A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

  Red Hat Fedora avahi Red Hat Enterprise Linux 9 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Nov 2, 2023
• Medium 6.2
  CVE-2023-38473

  Reachable assertion in avahi_alternative_host_name

  A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

  Red Hat Fedora avahi Red Hat Enterprise Linux 9 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  Nov 2, 2023
• Unscored —
  CVE-2021-3468

  A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection …

  avahi avahi avahi avahi Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 2, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1939614
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2191687
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2191690
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2191691
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2191692
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2191694
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0418.json
• report
  https://access.redhat.com/security/cve/CVE-2021-3468
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3468
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3468
• report
  https://access.redhat.com/security/cve/CVE-2023-38469
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38469
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38469
• report
  https://access.redhat.com/security/cve/CVE-2023-38470
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38470
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38470
• report
  https://access.redhat.com/security/cve/CVE-2023-38471
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38471
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38471
• report
  https://access.redhat.com/security/cve/CVE-2023-38472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38472
• report
  https://access.redhat.com/security/cve/CVE-2023-38473
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38473
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38473