SUSE-SU-2024:4386-1

Опубликовано: 19 дек. 2024

Источник: suse-cvrf

Описание

Security update for avahi

This update for avahi fixes the following issues:

CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)

Other fixes:
- no longer supply bogus services to callbacks (bsc#1226586).

Список пакетов

Container suse/sle-micro-rancher/5.3:latest

avahi-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

Container suse/sle-micro-rancher/5.4:latest

avahi-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

Container suse/sle-micro/5.5:latest

avahi-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

Image SLES15-SP4-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-HPC-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-HPC-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-HPC-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-HPC-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-HPC-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-HPC-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Hardened-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Hardened-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Hardened-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Hardened-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP4-SAP-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Hardened

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Hardened-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Hardened-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAP-Hardened-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAPCAL

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAPCAL-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAPCAL-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP4-SAPCAL-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-Azure-3P

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-Azure-Basic

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-Azure-Standard

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-CHOST-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-CHOST-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-CHOST-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-CHOST-BYOS-GDC

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-HPC-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-HPC-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-HPC-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-HPC-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-Hardened-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-Hardened-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-Hardened-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Azure-3P

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

Image SLES15-SP5-SAP-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Hardened-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAP-Hardened-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAPCAL-Azure

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAPCAL-EC2

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

Image SLES15-SP5-SAPCAL-GCE

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

SUSE Linux Enterprise Micro 5.3

avahi-0.8-150400.7.20.1

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

SUSE Linux Enterprise Micro 5.4

avahi-0.8-150400.7.20.1

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

SUSE Linux Enterprise Micro 5.5

avahi-0.8-150400.7.20.1

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

avahi-0.8-150400.7.20.1

avahi-compat-howl-devel-0.8-150400.7.20.1

avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1

avahi-lang-0.8-150400.7.20.1

avahi-utils-0.8-150400.7.20.1

libavahi-client3-0.8-150400.7.20.1

libavahi-client3-32bit-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-common3-32bit-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

libavahi-devel-0.8-150400.7.20.1

libavahi-glib-devel-0.8-150400.7.20.1

libavahi-glib1-0.8-150400.7.20.1

libavahi-gobject0-0.8-150400.7.20.1

libavahi-libevent1-0.8-150400.7.20.1

libavahi-ui-gtk3-0-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

libhowl0-0.8-150400.7.20.1

typelib-1_0-Avahi-0_6-0.8-150400.7.20.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

avahi-autoipd-0.8-150400.7.20.1

avahi-utils-gtk-0.8-150400.7.20.1

libavahi-gobject-devel-0.8-150400.7.20.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

python3-avahi-0.8-150400.7.20.1

openSUSE Leap 15.5

avahi-0.8-150400.7.20.1

avahi-autoipd-0.8-150400.7.20.1

avahi-compat-howl-devel-0.8-150400.7.20.1

avahi-compat-mDNSResponder-devel-0.8-150400.7.20.1

avahi-lang-0.8-150400.7.20.1

avahi-utils-0.8-150400.7.20.1

avahi-utils-gtk-0.8-150400.7.20.1

libavahi-client3-0.8-150400.7.20.1

libavahi-client3-32bit-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-common3-32bit-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

libavahi-devel-0.8-150400.7.20.1

libavahi-glib-devel-0.8-150400.7.20.1

libavahi-glib1-0.8-150400.7.20.1

libavahi-glib1-32bit-0.8-150400.7.20.1

libavahi-gobject-devel-0.8-150400.7.20.1

libavahi-gobject0-0.8-150400.7.20.1

libavahi-libevent1-0.8-150400.7.20.1

libavahi-qt5-1-0.8-150400.7.20.1

libavahi-qt5-devel-0.8-150400.7.20.1

libavahi-ui-gtk3-0-0.8-150400.7.20.1

libdns_sd-0.8-150400.7.20.1

libdns_sd-32bit-0.8-150400.7.20.1

libhowl0-0.8-150400.7.20.1

python3-avahi-0.8-150400.7.20.1

python3-avahi-gtk-0.8-150400.7.20.1

typelib-1_0-Avahi-0_6-0.8-150400.7.20.1

openSUSE Leap Micro 5.5

avahi-0.8-150400.7.20.1

libavahi-client3-0.8-150400.7.20.1

libavahi-common3-0.8-150400.7.20.1

libavahi-core7-0.8-150400.7.20.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20244386-1/
Link for SUSE-SU-2024:4386-1
https://lists.suse.com/pipermail/sle-security-updates/2024-December/020033.html
E-Mail link for SUSE-SU-2024:4386-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1226586
SUSE Bug 1226586
https://bugzilla.suse.com/1233420
SUSE Bug 1233420
https://www.suse.com/security/cve/CVE-2024-52616/
SUSE CVE CVE-2024-52616 page

Описание

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

Затронутые продукты

Container suse/sle-micro-rancher/5.3:latest:avahi-0.8-150400.7.20.1

Container suse/sle-micro-rancher/5.3:latest:libavahi-common3-0.8-150400.7.20.1

Container suse/sle-micro-rancher/5.3:latest:libavahi-core7-0.8-150400.7.20.1

Container suse/sle-micro-rancher/5.4:latest:avahi-0.8-150400.7.20.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-52616.html
CVE-2024-52616
https://bugzilla.suse.com/1233420
SUSE Bug 1233420