Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:03333-1

Опубликовано: 24 сент. 2025
Источник: suse-cvrf

Описание

Security update for avahi

This update for avahi fixes the following issues:

  • CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).

Список пакетов

Container suse/kiosk/firefox-esr:latest
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Container suse/pcp:latest
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Container suse/samba-client:latest
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Container suse/samba-server:latest
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Container suse/samba-toolbox:latest
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Image SLES15-SP7-Azure-Basic
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Image SLES15-SP7-BYOS-Azure
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Image SLES15-SP7-HPC-Azure
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
Image SLES15-SP7-HPC-BYOS-Azure
libavahi-client3-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
avahi-0.8-150600.15.9.1
avahi-compat-howl-devel-0.8-150600.15.9.1
avahi-compat-mDNSResponder-devel-0.8-150600.15.9.1
avahi-lang-0.8-150600.15.9.1
avahi-utils-0.8-150600.15.9.1
libavahi-client3-0.8-150600.15.9.1
libavahi-client3-32bit-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
libavahi-common3-32bit-0.8-150600.15.9.1
libavahi-core7-0.8-150600.15.9.1
libavahi-devel-0.8-150600.15.9.1
libavahi-glib-devel-0.8-150600.15.9.1
libavahi-glib1-0.8-150600.15.9.1
libavahi-gobject0-0.8-150600.15.9.1
libavahi-libevent1-0.8-150600.15.9.1
libavahi-ui-gtk3-0-0.8-150600.15.9.1
libdns_sd-0.8-150600.15.9.1
libhowl0-0.8-150600.15.9.1
typelib-1_0-Avahi-0_6-0.8-150600.15.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
avahi-0.8-150600.15.9.1
avahi-compat-howl-devel-0.8-150600.15.9.1
avahi-compat-mDNSResponder-devel-0.8-150600.15.9.1
avahi-lang-0.8-150600.15.9.1
avahi-utils-0.8-150600.15.9.1
libavahi-client3-0.8-150600.15.9.1
libavahi-client3-32bit-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
libavahi-common3-32bit-0.8-150600.15.9.1
libavahi-core7-0.8-150600.15.9.1
libavahi-devel-0.8-150600.15.9.1
libavahi-glib-devel-0.8-150600.15.9.1
libavahi-glib1-0.8-150600.15.9.1
libavahi-gobject0-0.8-150600.15.9.1
libavahi-libevent1-0.8-150600.15.9.1
libavahi-ui-gtk3-0-0.8-150600.15.9.1
libdns_sd-0.8-150600.15.9.1
libhowl0-0.8-150600.15.9.1
typelib-1_0-Avahi-0_6-0.8-150600.15.9.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6
avahi-autoipd-0.8-150600.15.9.1
avahi-utils-gtk-0.8-150600.15.9.1
libavahi-gobject-devel-0.8-150600.15.9.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
avahi-autoipd-0.8-150600.15.9.1
avahi-utils-gtk-0.8-150600.15.9.1
libavahi-gobject-devel-0.8-150600.15.9.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
python3-avahi-0.8-150600.15.9.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
python3-avahi-0.8-150600.15.9.1
openSUSE Leap 15.6
avahi-0.8-150600.15.9.1
avahi-autoipd-0.8-150600.15.9.1
avahi-compat-howl-devel-0.8-150600.15.9.1
avahi-compat-mDNSResponder-devel-0.8-150600.15.9.1
avahi-lang-0.8-150600.15.9.1
avahi-utils-0.8-150600.15.9.1
avahi-utils-gtk-0.8-150600.15.9.1
libavahi-client3-0.8-150600.15.9.1
libavahi-client3-32bit-0.8-150600.15.9.1
libavahi-common3-0.8-150600.15.9.1
libavahi-common3-32bit-0.8-150600.15.9.1
libavahi-core7-0.8-150600.15.9.1
libavahi-devel-0.8-150600.15.9.1
libavahi-glib-devel-0.8-150600.15.9.1
libavahi-glib1-0.8-150600.15.9.1
libavahi-glib1-32bit-0.8-150600.15.9.1
libavahi-gobject-devel-0.8-150600.15.9.1
libavahi-gobject0-0.8-150600.15.9.1
libavahi-libevent1-0.8-150600.15.9.1
libavahi-qt5-1-0.8-150600.15.9.1
libavahi-qt5-devel-0.8-150600.15.9.1
libavahi-ui-gtk3-0-0.8-150600.15.9.1
libdns_sd-0.8-150600.15.9.1
libdns_sd-32bit-0.8-150600.15.9.1
libhowl0-0.8-150600.15.9.1
python3-avahi-0.8-150600.15.9.1
python3-avahi-gtk-0.8-150600.15.9.1
typelib-1_0-Avahi-0_6-0.8-150600.15.9.1

Ссылки

Описание

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Затронутые продукты
Container suse/kiosk/firefox-esr:latest:libavahi-client3-0.8-150600.15.9.1
Container suse/kiosk/firefox-esr:latest:libavahi-common3-0.8-150600.15.9.1
Container suse/pcp:latest:libavahi-client3-0.8-150600.15.9.1
Container suse/pcp:latest:libavahi-common3-0.8-150600.15.9.1
Ссылки
Уязвимость SUSE-SU-2025:03333-1