Linux Compatible
  • News
    • Channels
    • Archive
    • Search
    • Submit
  • Articles
    • Categories
  • Knowledgebase
  • Compatibility
    • Search
  • Links
  • Forums
  • Twitter
Advertisement

Latest News
[ Windows | Linux | Apple ]

· CompatDB Updates 05/22/13
· Removing and Wiping Drivers Guide and more
· Windows Server 2012 Essentials SDK Installer 1.1
· Xbox One hardware and specs: 8-core CPU, 8GB RAM, 500GB hard drive and more
· Tim Cook: US-made Macs will be assembled in Texas
· Microsoft software satisfaction slumps
· Photos of Likely 802.11ac 'Gigabit Wi-Fi' Card From Next-Generation iMac Surface
· Mageia 3 released
· Understanding Email Bounce Messages and more
· How to Prepare for Windows 8 Even Though Its Not Coming to Enterprises

Upcoming News
· Shuttle OMNINAS KD20 @ techPowerUp
· What You Need To Know about the Xbox One @ ThinkComputers.org
· PQI Air Drive External Wireless Storage Device Product and Video Review
· PoINT Storage Manager 4.0 now available
· [CentOS-announce] CEEA-2013:0852 CentOS 5 rgmanager Update
· i-Mego Throne Gold Over Ear Headphones Review @ TestFreaks
· Xbox One: Entertainment Hub First, Gaming Console Second -- But Could It Disrupt TV?
· Star Wars: The Old Republic Gaming Mouse Review @ Madshrimps
· Samsung SSD 840 comparison @ Hardwareoverclock.com
· Leawo Total Media Converter Ultimate @ Benchmark Reviews

Linux Compatibility
· Dell Dimension 9100
· CL-CAM50001 UPC=3700284609322
· DFE 520 TX
· nVidia GeForce4 MX 440
· Gore: Ultimate Soldier
· SMC2802W V2 wi-fi 54Mbps PCI card
· Wireless modem router N300
· Dell P780
· ASUS A7V8X
· BricsCAD for Linux

New Forum Topics
· shutdown link ?
by: estirwent
on: 2013-05-11 17:46
18 replies, 6426 views

· Laptop keyboard drank soda
by: Zenn
on: 2013-04-30 00:27
1 replies, 682 views

· connecting to to internet with ubuntu
by: Zenn
on: 2013-04-30 00:26
2 replies, 4542 views

· Need Linux-compatible PS/2 expansion card
by: Zenn
on: 2013-04-30 00:26
1 replies, 752 views

· irql_not_less_or_equal blue screen
by: Zenn
on: 2013-04-30 00:25
2 replies, 1136 views

News Channels
· Drivers
· Guides
· Reviews
· Security
· Software
· Press Release
· Updates
· Interviews
· Linux
· General
· Debian
· Red Hat
· Slackware
· Gentoo
· Mandriva
· White Box
· SUSE
· GNOME
· KDE
· CentOS
· Ubuntu
· MEPIS
· Android

What's New
Login to see an overview of all news stories since your last visit.

Welcome to our website

To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.

Linux Compatible » News » April 2011 » RHSA-2011:0436-01: Moderate: avahi security update

RHSA-2011:0436-01: Moderate: avahi security update

Posted by Philipp Esselbach on: 04/12/2011 08:08 PM [ Print | 0 comment(s) ]

Updated avahi packages are available for RHEL 5




=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: avahi security update
Advisory ID: RHSA-2011:0436-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2011-0436.html
Issue date: 2011-04-12
CVE Names: CVE-2011-1002
=====================================================================

1. Summary:

Updated avahi packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

3. Description:

Avahi is an implementation of the DNS Service Discovery and Multicast DNS
specifications for Zero Configuration Networking. It facilitates service
discovery on a local network. Avahi and Avahi-aware applications allow you
to plug your computer into a network and, with no configuration, view other
people to chat with, view printers to print to, and find shared files on
other computers.

A flaw was found in the way the Avahi daemon (avahi-daemon) processed
Multicast DNS (mDNS) packets with an empty payload. An attacker on the
local network could use this flaw to cause avahi-daemon on a target system
to enter an infinite loop via an empty mDNS UDP packet. (CVE-2011-1002)

All users are advised to upgrade to these updated packages, which contain
a backported patch to correct this issue. After installing the update,
avahi-daemon will be restarted automatically.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

667187 - CVE-2011-1002 avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)

6. Package List:

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/avahi-0.6.16-10.el5_6.src.rpm

i386:
avahi-0.6.16-10.el5_6.i386.rpm
avahi-compat-howl-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.i386.rpm
avahi-debuginfo-0.6.16-10.el5_6.i386.rpm
avahi-glib-0.6.16-10.el5_6.i386.rpm
avahi-qt3-0.6.16-10.el5_6.i386.rpm
avahi-tools-0.6.16-10.el5_6.i386.rpm

x86_64:
avahi-0.6.16-10.el5_6.i386.rpm
avahi-0.6.16-10.el5_6.x86_64.rpm
avahi-compat-howl-0.6.16-10.el5_6.i386.rpm
avahi-compat-howl-0.6.16-10.el5_6.x86_64.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.x86_64.rpm
avahi-debuginfo-0.6.16-10.el5_6.i386.rpm
avahi-debuginfo-0.6.16-10.el5_6.x86_64.rpm
avahi-glib-0.6.16-10.el5_6.i386.rpm
avahi-glib-0.6.16-10.el5_6.x86_64.rpm
avahi-qt3-0.6.16-10.el5_6.i386.rpm
avahi-qt3-0.6.16-10.el5_6.x86_64.rpm
avahi-tools-0.6.16-10.el5_6.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/avahi-0.6.16-10.el5_6.src.rpm

i386:
avahi-compat-howl-devel-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.i386.rpm
avahi-debuginfo-0.6.16-10.el5_6.i386.rpm
avahi-devel-0.6.16-10.el5_6.i386.rpm
avahi-glib-devel-0.6.16-10.el5_6.i386.rpm
avahi-qt3-devel-0.6.16-10.el5_6.i386.rpm

x86_64:
avahi-compat-howl-devel-0.6.16-10.el5_6.i386.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-debuginfo-0.6.16-10.el5_6.i386.rpm
avahi-debuginfo-0.6.16-10.el5_6.x86_64.rpm
avahi-devel-0.6.16-10.el5_6.i386.rpm
avahi-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-glib-devel-0.6.16-10.el5_6.i386.rpm
avahi-glib-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-qt3-devel-0.6.16-10.el5_6.i386.rpm
avahi-qt3-devel-0.6.16-10.el5_6.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/avahi-0.6.16-10.el5_6.src.rpm

i386:
avahi-0.6.16-10.el5_6.i386.rpm
avahi-compat-howl-0.6.16-10.el5_6.i386.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.i386.rpm
avahi-debuginfo-0.6.16-10.el5_6.i386.rpm
avahi-devel-0.6.16-10.el5_6.i386.rpm
avahi-glib-0.6.16-10.el5_6.i386.rpm
avahi-glib-devel-0.6.16-10.el5_6.i386.rpm
avahi-qt3-0.6.16-10.el5_6.i386.rpm
avahi-qt3-devel-0.6.16-10.el5_6.i386.rpm
avahi-tools-0.6.16-10.el5_6.i386.rpm

ia64:
avahi-0.6.16-10.el5_6.ia64.rpm
avahi-compat-howl-0.6.16-10.el5_6.ia64.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.ia64.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.ia64.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.ia64.rpm
avahi-debuginfo-0.6.16-10.el5_6.ia64.rpm
avahi-devel-0.6.16-10.el5_6.ia64.rpm
avahi-glib-0.6.16-10.el5_6.ia64.rpm
avahi-glib-devel-0.6.16-10.el5_6.ia64.rpm
avahi-qt3-0.6.16-10.el5_6.ia64.rpm
avahi-qt3-devel-0.6.16-10.el5_6.ia64.rpm
avahi-tools-0.6.16-10.el5_6.ia64.rpm

ppc:
avahi-0.6.16-10.el5_6.ppc.rpm
avahi-0.6.16-10.el5_6.ppc64.rpm
avahi-compat-howl-0.6.16-10.el5_6.ppc.rpm
avahi-compat-howl-0.6.16-10.el5_6.ppc64.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.ppc.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.ppc64.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.ppc.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.ppc64.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.ppc.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.ppc64.rpm
avahi-debuginfo-0.6.16-10.el5_6.ppc.rpm
avahi-debuginfo-0.6.16-10.el5_6.ppc64.rpm
avahi-devel-0.6.16-10.el5_6.ppc.rpm
avahi-devel-0.6.16-10.el5_6.ppc64.rpm
avahi-glib-0.6.16-10.el5_6.ppc.rpm
avahi-glib-0.6.16-10.el5_6.ppc64.rpm
avahi-glib-devel-0.6.16-10.el5_6.ppc.rpm
avahi-glib-devel-0.6.16-10.el5_6.ppc64.rpm
avahi-qt3-0.6.16-10.el5_6.ppc.rpm
avahi-qt3-0.6.16-10.el5_6.ppc64.rpm
avahi-qt3-devel-0.6.16-10.el5_6.ppc.rpm
avahi-qt3-devel-0.6.16-10.el5_6.ppc64.rpm
avahi-tools-0.6.16-10.el5_6.ppc.rpm

s390x:
avahi-0.6.16-10.el5_6.s390.rpm
avahi-0.6.16-10.el5_6.s390x.rpm
avahi-compat-howl-0.6.16-10.el5_6.s390.rpm
avahi-compat-howl-0.6.16-10.el5_6.s390x.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.s390.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.s390x.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.s390.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.s390x.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.s390.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.s390x.rpm
avahi-debuginfo-0.6.16-10.el5_6.s390.rpm
avahi-debuginfo-0.6.16-10.el5_6.s390x.rpm
avahi-devel-0.6.16-10.el5_6.s390.rpm
avahi-devel-0.6.16-10.el5_6.s390x.rpm
avahi-glib-0.6.16-10.el5_6.s390.rpm
avahi-glib-0.6.16-10.el5_6.s390x.rpm
avahi-glib-devel-0.6.16-10.el5_6.s390.rpm
avahi-glib-devel-0.6.16-10.el5_6.s390x.rpm
avahi-qt3-0.6.16-10.el5_6.s390.rpm
avahi-qt3-0.6.16-10.el5_6.s390x.rpm
avahi-qt3-devel-0.6.16-10.el5_6.s390.rpm
avahi-qt3-devel-0.6.16-10.el5_6.s390x.rpm
avahi-tools-0.6.16-10.el5_6.s390x.rpm

x86_64:
avahi-0.6.16-10.el5_6.i386.rpm
avahi-0.6.16-10.el5_6.x86_64.rpm
avahi-compat-howl-0.6.16-10.el5_6.i386.rpm
avahi-compat-howl-0.6.16-10.el5_6.x86_64.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.i386.rpm
avahi-compat-howl-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-0.6.16-10.el5_6.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.i386.rpm
avahi-compat-libdns_sd-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-debuginfo-0.6.16-10.el5_6.i386.rpm
avahi-debuginfo-0.6.16-10.el5_6.x86_64.rpm
avahi-devel-0.6.16-10.el5_6.i386.rpm
avahi-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-glib-0.6.16-10.el5_6.i386.rpm
avahi-glib-0.6.16-10.el5_6.x86_64.rpm
avahi-glib-devel-0.6.16-10.el5_6.i386.rpm
avahi-glib-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-qt3-0.6.16-10.el5_6.i386.rpm
avahi-qt3-0.6.16-10.el5_6.x86_64.rpm
avahi-qt3-devel-0.6.16-10.el5_6.i386.rpm
avahi-qt3-devel-0.6.16-10.el5_6.x86_64.rpm
avahi-tools-0.6.16-10.el5_6.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2011-1002.html
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2011 Red Hat, Inc.


Bookmark and Share

« Microsoft Security Bulletin Summary for April 2011 · RHSA-2011:0429-01: Important: kernel security and bug fix update »

Linux Compatible » News » April 2011 » RHSA-2011:0436-01: Moderate: avahi security update
All products mentioned are registered trademarks or trademarks of their respective owners.
© 2002-2013 Esselbach Internet Solutions - All Rights Reserved. Terms and privacy policy
Powered by Contentteller® Business Edition