SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2200

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2200

Security update for avahi

Type: security

Severity: moderate

Issued: 2024-06-25

Description:

This update for avahi fixes the following issues:

- CVE-2023-38471: Fixed a reachable assertion in dbus_set_host_name. (bsc#1216594)
- CVE-2023-38469: Fixed a reachable assertion in avahi_dns_packet_append_record. (bsc#1216598)

References

CVE: CVE-2023-38471
CVE: CVE-2023-38469
Bugzilla: 1226586 avahi-browse -a fails with "Invalid service type"
Bugzilla: 1216598 VUL-0: CVE-2023-38469: avahi: CVEs assigned for reachable assertions in avahi
Bugzilla: 1216594 VUL-0: CVE-2023-38471: avahi: Reachable assertion in dbus_set_host_name

Packages

avahi-0.8-150600.15.3.1