SUSE-SU-2023:4901-1: Security update for avahi
This update for avahi fixes the following issues: CVE-2023-38472: Fixed reachable assertion in avahirdataparse (bsc#1216853).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/avahi-debugsourceto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libhowl0-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-glib2-debugsourceto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/python3-avahi-gtkto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-gobject0to a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-utils-gtkto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-core7-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-compat-howl-develto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-glib1to a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libhowl0to a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-utils-gtk-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-qt5to a version that resolves this vulnerability.Fixed in 1-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-common3to a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-glib-develto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-utilsto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-client3-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-glib1-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/python3-avahito a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-autoipd-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-compat-mDNSResponder-develto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-utils-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-ui-gtk3to a version that resolves this vulnerability.Fixed in 0-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-gobject0-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-qt5-develto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-develto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-Avahi-0_6-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-autoipdto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahito a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-qt5-debugsourceto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-qt5to a version that resolves this vulnerability.Fixed in 1-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-client3to a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-ui-gtk3to a version that resolves this vulnerability.Fixed in 0-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-gobject-develto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-common3-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-libevent1-debuginfoto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-core7to a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-libevent1to a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-glib1to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-common3to a version that resolves this vulnerability.Fixed in 32bit-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-common3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-client3to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-glib1to a version that resolves this vulnerability.Fixed in 32bit-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-client3to a version that resolves this vulnerability.Fixed in 32bit-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahito a version that resolves this vulnerability.Fixed in 32bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahi-langto a version that resolves this vulnerability.Fixed in 0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-common3to a version that resolves this vulnerability.Fixed in 64bit-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-client3to a version that resolves this vulnerability.Fixed in 64bit-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-client3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-glib1to a version that resolves this vulnerability.Fixed in 64bit-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/avahito a version that resolves this vulnerability.Fixed in 64bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-common3to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade
suse/libavahi-glib1to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-0.8-150400.7.13.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-4901=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-4901=1
Event History
Frequently Asked Questions
Which installed components should be checked when triaging this update?
Check for suse/avahi and the runtime libraries suse/libavahi-common3, suse/libavahi-client3, and their associated debug or debuginfo packages listed in the advisory. The update applies to these Avahi-related components.