SUSE-SU-2023:4910-1

Опубликовано: 19 дек. 2023

Источник: suse-cvrf

Описание

Security update for avahi

This update for avahi fixes the following issues:

CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).
CVE-2023-38470: Fixed that each label is at least one byte long (bsc#1215947).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

avahi-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libavahi-core7-0.7-150100.3.29.1

Image SLES15-SP2-BYOS-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP2-HPC-BYOS-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP2-SAP-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libdns_sd-0.7-150100.3.29.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libdns_sd-0.7-150100.3.29.1

Image SLES15-SP2-SAP-BYOS-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-BYOS-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-BYOS-EC2-HVM

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-BYOS-GCE

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-CHOST-BYOS-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-CHOST-BYOS-EC2

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-CHOST-BYOS-GCE

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-HPC-BYOS-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-HPC-BYOS-GCE

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libdns_sd-0.7-150100.3.29.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libdns_sd-0.7-150100.3.29.1

Image SLES15-SP3-SAP-BYOS-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-SAP-BYOS-GCE

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

Image SLES15-SP3-SAPCAL-Azure

libavahi-client3-0.7-150100.3.29.1

libavahi-client3-32bit-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libavahi-common3-32bit-0.7-150100.3.29.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libavahi-client3-0.7-150100.3.29.1

libavahi-client3-32bit-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libavahi-common3-32bit-0.7-150100.3.29.1

Image SLES15-SP3-SAPCAL-GCE

libavahi-client3-0.7-150100.3.29.1

libavahi-client3-32bit-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libavahi-common3-32bit-0.7-150100.3.29.1

SUSE Linux Enterprise Micro 5.2

avahi-0.7-150100.3.29.1

libavahi-client3-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libavahi-core7-0.7-150100.3.29.1

SUSE Manager Proxy 4.2

avahi-0.7-150100.3.29.1

avahi-compat-howl-devel-0.7-150100.3.29.1

avahi-compat-mDNSResponder-devel-0.7-150100.3.29.1

avahi-lang-0.7-150100.3.29.1

avahi-utils-0.7-150100.3.29.1

libavahi-client3-0.7-150100.3.29.1

libavahi-client3-32bit-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libavahi-common3-32bit-0.7-150100.3.29.1

libavahi-core7-0.7-150100.3.29.1

libavahi-devel-0.7-150100.3.29.1

libavahi-glib-devel-0.7-150100.3.29.1

libavahi-glib1-0.7-150100.3.29.1

libavahi-gobject0-0.7-150100.3.29.1

libavahi-ui-gtk3-0-0.7-150100.3.29.1

libavahi-ui0-0.7-150100.3.29.1

libdns_sd-0.7-150100.3.29.1

libhowl0-0.7-150100.3.29.1

typelib-1_0-Avahi-0_6-0.7-150100.3.29.1

SUSE Manager Server 4.2

avahi-0.7-150100.3.29.1

avahi-compat-howl-devel-0.7-150100.3.29.1

avahi-compat-mDNSResponder-devel-0.7-150100.3.29.1

avahi-lang-0.7-150100.3.29.1

avahi-utils-0.7-150100.3.29.1

libavahi-client3-0.7-150100.3.29.1

libavahi-client3-32bit-0.7-150100.3.29.1

libavahi-common3-0.7-150100.3.29.1

libavahi-common3-32bit-0.7-150100.3.29.1

libavahi-core7-0.7-150100.3.29.1

libavahi-devel-0.7-150100.3.29.1

libavahi-glib-devel-0.7-150100.3.29.1

libavahi-glib1-0.7-150100.3.29.1

libavahi-gobject0-0.7-150100.3.29.1

libavahi-ui-gtk3-0-0.7-150100.3.29.1

libavahi-ui0-0.7-150100.3.29.1

libdns_sd-0.7-150100.3.29.1

libhowl0-0.7-150100.3.29.1

typelib-1_0-Avahi-0_6-0.7-150100.3.29.1

openSUSE Leap 15.4

libavahi-ui0-0.7-150100.3.29.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20234910-1/
Link for SUSE-SU-2023:4910-1
https://lists.suse.com/pipermail/sle-security-updates/2023-December/017450.html
E-Mail link for SUSE-SU-2023:4910-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1215947
SUSE Bug 1215947
https://bugzilla.suse.com/1216419
SUSE Bug 1216419
https://www.suse.com/security/cve/CVE-2023-38470/
SUSE CVE CVE-2023-38470 page
https://www.suse.com/security/cve/CVE-2023-38473/
SUSE CVE CVE-2023-38473 page

Описание

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:avahi-0.7-150100.3.29.1

Container suse/sle-micro-rancher/5.2:latest:libavahi-common3-0.7-150100.3.29.1

Container suse/sle-micro-rancher/5.2:latest:libavahi-core7-0.7-150100.3.29.1

Image SLES15-SP2-BYOS-Azure:libavahi-client3-0.7-150100.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-38470.html
CVE-2023-38470
https://bugzilla.suse.com/1215947
SUSE Bug 1215947

Описание

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:avahi-0.7-150100.3.29.1

Container suse/sle-micro-rancher/5.2:latest:libavahi-common3-0.7-150100.3.29.1

Container suse/sle-micro-rancher/5.2:latest:libavahi-core7-0.7-150100.3.29.1

Image SLES15-SP2-BYOS-Azure:libavahi-client3-0.7-150100.3.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-38473.html
CVE-2023-38473
https://bugzilla.suse.com/1216419
SUSE Bug 1216419

SUSE-SU-2023:4910-1

Описание

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP3-BYOS-Azure

Image SLES15-SP3-BYOS-EC2-HVM

Image SLES15-SP3-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-Aliyun

Image SLES15-SP3-CHOST-BYOS-Azure

Image SLES15-SP3-CHOST-BYOS-EC2

Image SLES15-SP3-CHOST-BYOS-GCE

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

Image SLES15-SP3-HPC-BYOS-Azure

Image SLES15-SP3-HPC-BYOS-EC2-HVM

Image SLES15-SP3-HPC-BYOS-GCE

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-BYOS-Azure

Image SLES15-SP3-SAP-BYOS-EC2-HVM

Image SLES15-SP3-SAP-BYOS-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Micro 5.2

SUSE Manager Proxy 4.2

SUSE Manager Server 4.2

openSUSE Leap 15.4

Ссылки

Уязвимость: CVE-2023-38470

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-38473

Описание

Затронутые продукты

Ссылки