SUSE-SU-2021:1494-2

Опубликовано: 03 июн. 2021

Источник: suse-cvrf

Описание

Security update for avahi

This update for avahi fixes the following issues:

CVE-2021-3468: avoid infinite loop by handling HUP event in client_work (bsc#1184521).

Список пакетов

HPE Helion OpenStack 8

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

Image SLES12-SP4-Azure-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-EC2-HVM-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-GCE-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-Azure

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-Azure-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-EC2-HVM

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-EC2-HVM-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-GCE

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP4-SAP-GCE-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-Azure-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-Azure-Basic-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-Azure-HPC-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-Azure-HPC-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-Azure-SAP-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-Azure-SAP-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-Azure-Standard-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-EC2-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-EC2-ECS-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-EC2-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-EC2-SAP-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-EC2-SAP-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-GCE-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-GCE-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-GCE-SAP-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-GCE-SAP-On-Demand

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-OCI-BYOS-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

libavahi-client3-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

SUSE Linux Enterprise Server 12 SP2-BCL

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE Linux Enterprise Server 12 SP3-BCL

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE Linux Enterprise Server 12 SP3-LTSS

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE Linux Enterprise Server 12 SP4-LTSS

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE Linux Enterprise Server for SAP Applications 12 SP3

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE OpenStack Cloud 8

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE OpenStack Cloud 9

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE OpenStack Cloud Crowbar 8

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

SUSE OpenStack Cloud Crowbar 9

avahi-0.6.32-32.15.1

avahi-lang-0.6.32-32.15.1

avahi-utils-0.6.32-32.15.1

libavahi-client3-0.6.32-32.15.1

libavahi-client3-32bit-0.6.32-32.15.1

libavahi-common3-0.6.32-32.15.1

libavahi-common3-32bit-0.6.32-32.15.1

libavahi-core7-0.6.32-32.15.1

libavahi-glib1-0.6.32-32.15.1

libavahi-glib1-32bit-0.6.32-32.15.1

libdns_sd-0.6.32-32.15.1

libdns_sd-32bit-0.6.32-32.15.1

Ссылки

https://www.suse.com/support/update/announcement/2021/suse-su-20211494-2/
Link for SUSE-SU-2021:1494-2
https://lists.suse.com/pipermail/sle-security-updates/2021-June/008929.html
E-Mail link for SUSE-SU-2021:1494-2
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1184521
SUSE Bug 1184521
https://www.suse.com/security/cve/CVE-2021-3468/
SUSE CVE CVE-2021-3468 page

Описание

A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.

Затронутые продукты

HPE Helion OpenStack 8:avahi-0.6.32-32.15.1

HPE Helion OpenStack 8:avahi-lang-0.6.32-32.15.1

HPE Helion OpenStack 8:avahi-utils-0.6.32-32.15.1

HPE Helion OpenStack 8:libavahi-client3-0.6.32-32.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-3468.html
CVE-2021-3468
https://bugzilla.suse.com/1184521
SUSE Bug 1184521

SUSE-SU-2021:1494-2

Описание

Список пакетов

HPE Helion OpenStack 8

Image SLES12-SP4-Azure-BYOS

Image SLES12-SP4-EC2-HVM-BYOS

Image SLES12-SP4-GCE-BYOS

Image SLES12-SP4-SAP-Azure

Image SLES12-SP4-SAP-Azure-BYOS

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES12-SP4-SAP-EC2-HVM

Image SLES12-SP4-SAP-EC2-HVM-BYOS

Image SLES12-SP4-SAP-GCE

Image SLES12-SP4-SAP-GCE-BYOS

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-OCI-BYOS-BYOS

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP2-BCL

SUSE Linux Enterprise Server 12 SP3-BCL

SUSE Linux Enterprise Server 12 SP3-LTSS

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 12 SP3

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2021-3468

Описание

Затронутые продукты

Ссылки