Security update for avahi SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2019:0128-1 Final 1 1 2019-02-04T08:39:55Z current 2019-02-04T08:39:55Z 2019-02-04T08:39:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for avahi This update for avahi fixes the following issues: Security issue fixed: - CVE-2018-1000845: Fixed DNS amplification and reflection to spoofed addresses (DOS) (bsc#1120281) This update was imported from the SUSE:SLE-12-SP2:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00000.html E-Mail link for openSUSE-SU-2019:0128-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.3 avahi-0.6.32-4.3.1 avahi-autoipd-0.6.32-4.3.1 avahi-compat-howl-devel-0.6.32-4.3.1 avahi-compat-mDNSResponder-devel-0.6.32-4.3.1 avahi-glib2-0.6.32-4.3.1 avahi-lang-0.6.32-4.3.1 avahi-mono-0.6.32-4.3.1 avahi-qt4-0.6.32-4.3.1 avahi-utils-0.6.32-4.3.1 avahi-utils-gtk-0.6.32-4.3.1 libavahi-client3-0.6.32-4.3.1 libavahi-client3-32bit-0.6.32-4.3.1 libavahi-common3-0.6.32-4.3.1 libavahi-common3-32bit-0.6.32-4.3.1 libavahi-core7-0.6.32-4.3.1 libavahi-devel-0.6.32-4.3.1 libavahi-glib-devel-0.6.32-4.3.1 libavahi-glib1-0.6.32-4.3.1 libavahi-glib1-32bit-0.6.32-4.3.1 libavahi-gobject-devel-0.6.32-4.3.1 libavahi-gobject0-0.6.32-4.3.1 libavahi-qt4-1-0.6.32-4.3.1 libavahi-qt4-devel-0.6.32-4.3.1 libavahi-ui-gtk3-0-0.6.32-4.3.1 libavahi-ui0-0.6.32-4.3.1 libdns_sd-0.6.32-4.3.1 libdns_sd-32bit-0.6.32-4.3.1 libhowl0-0.6.32-4.3.1 python-avahi-0.6.32-4.3.1 python-avahi-gtk-0.6.32-4.3.1 typelib-1_0-Avahi-0_6-0.6.32-4.3.1 avahi-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-autoipd-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-compat-howl-devel-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-compat-mDNSResponder-devel-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-glib2-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-lang-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-mono-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-qt4-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-utils-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 avahi-utils-gtk-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-client3-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-client3-32bit-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-common3-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-common3-32bit-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-core7-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-devel-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-glib-devel-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-glib1-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-glib1-32bit-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-gobject-devel-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-gobject0-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-qt4-1-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-qt4-devel-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-ui-gtk3-0-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libavahi-ui0-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libdns_sd-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libdns_sd-32bit-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 libhowl0-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 python-avahi-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 python-avahi-gtk-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 typelib-1_0-Avahi-0_6-0.6.32-4.3.1 as a component of openSUSE Leap 42.3 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. CVE-2018-1000845 openSUSE Leap 42.3:avahi-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-autoipd-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-compat-howl-devel-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-compat-mDNSResponder-devel-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-glib2-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-lang-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-mono-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-qt4-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-utils-0.6.32-4.3.1 openSUSE Leap 42.3:avahi-utils-gtk-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-client3-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-client3-32bit-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-common3-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-common3-32bit-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-core7-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-devel-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-glib-devel-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-glib1-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-glib1-32bit-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-gobject-devel-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-gobject0-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-qt4-1-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-qt4-devel-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-ui-gtk3-0-0.6.32-4.3.1 openSUSE Leap 42.3:libavahi-ui0-0.6.32-4.3.1 openSUSE Leap 42.3:libdns_sd-0.6.32-4.3.1 openSUSE Leap 42.3:libdns_sd-32bit-0.6.32-4.3.1 openSUSE Leap 42.3:libhowl0-0.6.32-4.3.1 openSUSE Leap 42.3:python-avahi-0.6.32-4.3.1 openSUSE Leap 42.3:python-avahi-gtk-0.6.32-4.3.1 openSUSE Leap 42.3:typelib-1_0-Avahi-0_6-0.6.32-4.3.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2019-02/msg00000.html https://www.suse.com/security/cve/CVE-2018-1000845.html CVE-2018-1000845 https://bugzilla.suse.com/1120281 SUSE Bug 1120281