• 公告ID (KylinSec-SA-2023-1850)

摘要:

avahi security update

安全等级: Medium

公告ID: KylinSec-SA-2023-1850

发布日期: 2023年11月10日

关联CVE: CVE-2023-38469  

  • 详细介绍

1. 漏洞描述

   

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.

Security Fix(es):

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.(CVE-2023-38469)

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2023-38469 KY3.4-4A avahi Fixed
CVE-2023-38469 KY3.4-5A avahi Fixed
CVE-2023-38469 KY3.5.1 avahi Fixed
CVE-2023-38469 KY3.5.2 avahi Fixed

3. 影响组件

    avahi

4. 修复版本

   

KY3.5.1

软件名称 架构 版本号
avahi-help noarch 0.8-17.kb2.ky3_5
avahi-ui x86_64 0.8-17.kb2.ky3_5
avahi-gobject x86_64 0.8-17.kb2.ky3_5
avahi-ui-devel x86_64 0.8-17.kb2.ky3_5
avahi-tools x86_64 0.8-17.kb2.ky3_5
avahi-libs x86_64 0.8-17.kb2.ky3_5
avahi-compat-howl x86_64 0.8-17.kb2.ky3_5
avahi-compat-libdns_sd x86_64 0.8-17.kb2.ky3_5
avahi-dnsconfd x86_64 0.8-17.kb2.ky3_5
avahi-compat-libdns_sd-devel x86_64 0.8-17.kb2.ky3_5
avahi-devel x86_64 0.8-17.kb2.ky3_5
avahi-glib x86_64 0.8-17.kb2.ky3_5
avahi-autoipd x86_64 0.8-17.kb2.ky3_5
avahi-ui-gtk3 x86_64 0.8-17.kb2.ky3_5
avahi-glib-devel x86_64 0.8-17.kb2.ky3_5
avahi-compat-howl-devel x86_64 0.8-17.kb2.ky3_5
avahi x86_64 0.8-17.kb2.ky3_5
avahi-gobject-devel x86_64 0.8-17.kb2.ky3_5
avahi-gobject aarch64 0.8-17.kb2.ky3_5
avahi-autoipd aarch64 0.8-17.kb2.ky3_5
avahi-dnsconfd aarch64 0.8-17.kb2.ky3_5
avahi-compat-howl aarch64 0.8-17.kb2.ky3_5
avahi-ui-gtk3 aarch64 0.8-17.kb2.ky3_5
avahi-glib-devel aarch64 0.8-17.kb2.ky3_5
avahi-devel aarch64 0.8-17.kb2.ky3_5
avahi aarch64 0.8-17.kb2.ky3_5
avahi-libs aarch64 0.8-17.kb2.ky3_5
avahi-gobject-devel aarch64 0.8-17.kb2.ky3_5
avahi-compat-libdns_sd aarch64 0.8-17.kb2.ky3_5
avahi-ui-devel aarch64 0.8-17.kb2.ky3_5
avahi-glib aarch64 0.8-17.kb2.ky3_5
avahi-ui aarch64 0.8-17.kb2.ky3_5
avahi-compat-libdns_sd-devel aarch64 0.8-17.kb2.ky3_5
avahi-tools aarch64 0.8-17.kb2.ky3_5
avahi-compat-howl-devel aarch64 0.8-17.kb2.ky3_5

KY3.4-4A

软件名称 架构 版本号
avahi-help noarch 0.8-11.kb2.ky3_4
avahi-gobject x86_64 0.8-11.kb2.ky3_4
avahi-qt5-devel x86_64 0.8-11.kb2.ky3_4
avahi-glib-devel x86_64 0.8-11.kb2.ky3_4
avahi-devel x86_64 0.8-11.kb2.ky3_4
avahi-qt5 x86_64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd x86_64 0.8-11.kb2.ky3_4
avahi-tools x86_64 0.8-11.kb2.ky3_4
avahi-ui-devel x86_64 0.8-11.kb2.ky3_4
avahi-compat-howl x86_64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd-devel x86_64 0.8-11.kb2.ky3_4
avahi-gobject-devel x86_64 0.8-11.kb2.ky3_4
avahi-ui x86_64 0.8-11.kb2.ky3_4
avahi-libs x86_64 0.8-11.kb2.ky3_4
avahi-autoipd x86_64 0.8-11.kb2.ky3_4
avahi-glib x86_64 0.8-11.kb2.ky3_4
avahi-compat-howl-devel x86_64 0.8-11.kb2.ky3_4
avahi-dnsconfd x86_64 0.8-11.kb2.ky3_4
avahi x86_64 0.8-11.kb2.ky3_4
avahi-ui-gtk3 x86_64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd-devel aarch64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd aarch64 0.8-11.kb2.ky3_4
avahi-qt5-devel aarch64 0.8-11.kb2.ky3_4
avahi-ui-gtk3 aarch64 0.8-11.kb2.ky3_4
avahi-compat-howl-devel aarch64 0.8-11.kb2.ky3_4
avahi-glib aarch64 0.8-11.kb2.ky3_4
avahi-libs aarch64 0.8-11.kb2.ky3_4
avahi-compat-howl aarch64 0.8-11.kb2.ky3_4
avahi-devel aarch64 0.8-11.kb2.ky3_4
avahi-tools aarch64 0.8-11.kb2.ky3_4
avahi-autoipd aarch64 0.8-11.kb2.ky3_4
avahi aarch64 0.8-11.kb2.ky3_4
avahi-gobject-devel aarch64 0.8-11.kb2.ky3_4
avahi-ui aarch64 0.8-11.kb2.ky3_4
avahi-qt5 aarch64 0.8-11.kb2.ky3_4
avahi-dnsconfd aarch64 0.8-11.kb2.ky3_4
avahi-gobject aarch64 0.8-11.kb2.ky3_4
avahi-glib-devel aarch64 0.8-11.kb2.ky3_4
avahi-ui-devel aarch64 0.8-11.kb2.ky3_4

KY3.4-5A

软件名称 架构 版本号
avahi-help noarch 0.8-11.kb2.ky3_4
avahi-glib x86_64 0.8-11.kb2.ky3_4
avahi-gobject x86_64 0.8-11.kb2.ky3_4
avahi-libs x86_64 0.8-11.kb2.ky3_4
avahi-qt5-devel x86_64 0.8-11.kb2.ky3_4
avahi-gobject-devel x86_64 0.8-11.kb2.ky3_4
avahi-ui-devel x86_64 0.8-11.kb2.ky3_4
avahi-glib-devel x86_64 0.8-11.kb2.ky3_4
avahi-compat-howl-devel x86_64 0.8-11.kb2.ky3_4
avahi-ui-gtk3 x86_64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd x86_64 0.8-11.kb2.ky3_4
avahi-compat-howl x86_64 0.8-11.kb2.ky3_4
avahi-autoipd x86_64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd-devel x86_64 0.8-11.kb2.ky3_4
avahi-dnsconfd x86_64 0.8-11.kb2.ky3_4
avahi-ui x86_64 0.8-11.kb2.ky3_4
avahi x86_64 0.8-11.kb2.ky3_4
avahi-tools x86_64 0.8-11.kb2.ky3_4
avahi-devel x86_64 0.8-11.kb2.ky3_4
avahi-qt5 x86_64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd aarch64 0.8-11.kb2.ky3_4
avahi-glib-devel aarch64 0.8-11.kb2.ky3_4
avahi aarch64 0.8-11.kb2.ky3_4
avahi-libs aarch64 0.8-11.kb2.ky3_4
avahi-ui-devel aarch64 0.8-11.kb2.ky3_4
avahi-glib aarch64 0.8-11.kb2.ky3_4
avahi-gobject-devel aarch64 0.8-11.kb2.ky3_4
avahi-autoipd aarch64 0.8-11.kb2.ky3_4
avahi-dnsconfd aarch64 0.8-11.kb2.ky3_4
avahi-qt5 aarch64 0.8-11.kb2.ky3_4
avahi-compat-howl aarch64 0.8-11.kb2.ky3_4
avahi-gobject aarch64 0.8-11.kb2.ky3_4
avahi-compat-libdns_sd-devel aarch64 0.8-11.kb2.ky3_4
avahi-ui-gtk3 aarch64 0.8-11.kb2.ky3_4
avahi-devel aarch64 0.8-11.kb2.ky3_4
avahi-ui aarch64 0.8-11.kb2.ky3_4
avahi-compat-howl-devel aarch64 0.8-11.kb2.ky3_4
avahi-qt5-devel aarch64 0.8-11.kb2.ky3_4
avahi-tools aarch64 0.8-11.kb2.ky3_4

KY3.5.2

软件名称 架构 版本号
avahi-help noarch 0.8-17.ky3_5
avahi x86_64 0.8-17.ky3_5
avahi-compat-libdns_sd-devel x86_64 0.8-17.ky3_5
avahi-tools x86_64 0.8-17.ky3_5
avahi-glib x86_64 0.8-17.ky3_5
avahi-ui x86_64 0.8-17.ky3_5
avahi-gobject x86_64 0.8-17.ky3_5
avahi-ui-devel x86_64 0.8-17.ky3_5
avahi-devel x86_64 0.8-17.ky3_5
avahi-compat-libdns_sd x86_64 0.8-17.ky3_5
avahi-ui-gtk3 x86_64 0.8-17.ky3_5
avahi-libs x86_64 0.8-17.ky3_5
avahi-compat-howl x86_64 0.8-17.ky3_5
avahi-autoipd x86_64 0.8-17.ky3_5
avahi-compat-howl-devel x86_64 0.8-17.ky3_5
avahi-glib-devel x86_64 0.8-17.ky3_5
avahi-gobject-devel x86_64 0.8-17.ky3_5
avahi-dnsconfd x86_64 0.8-17.ky3_5
avahi-ui-devel aarch64 0.8-17.ky3_5
avahi-ui-gtk3 aarch64 0.8-17.ky3_5
avahi-gobject aarch64 0.8-17.ky3_5
avahi-glib aarch64 0.8-17.ky3_5
avahi-libs aarch64 0.8-17.ky3_5
avahi-compat-howl aarch64 0.8-17.ky3_5
avahi aarch64 0.8-17.ky3_5
avahi-autoipd aarch64 0.8-17.ky3_5
avahi-ui aarch64 0.8-17.ky3_5
avahi-compat-libdns_sd aarch64 0.8-17.ky3_5
avahi-compat-libdns_sd-devel aarch64 0.8-17.ky3_5
avahi-devel aarch64 0.8-17.ky3_5
avahi-dnsconfd aarch64 0.8-17.ky3_5
avahi-compat-howl-devel aarch64 0.8-17.ky3_5
avahi-gobject-devel aarch64 0.8-17.ky3_5
avahi-tools aarch64 0.8-17.ky3_5
avahi-glib-devel aarch64 0.8-17.ky3_5

5. 修复方法


方法一:下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存,如 xxx.rpm
2、通过rpm命令升级,如 rpm -Uvh xxx.rpm

方法二:通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包,如 yum install 包名

6. 下载链接

   

KY3.5.1:

x86_64:

     avahi-help   

     avahi-ui   

     avahi-gobject   

     avahi-ui-devel   

     avahi-tools   

     avahi-libs   

     avahi-compat-howl   

     avahi-compat-libdns_sd   

     avahi-dnsconfd   

     avahi-compat-libdns_sd-devel   

     avahi-devel   

     avahi-glib   

     avahi-autoipd   

     avahi-ui-gtk3   

     avahi-glib-devel   

     avahi-compat-howl-devel   

     avahi   

     avahi-gobject-devel   

aarch64:

     avahi-help   

     avahi-gobject   

     avahi-autoipd   

     avahi-dnsconfd   

     avahi-compat-howl   

     avahi-ui-gtk3   

     avahi-glib-devel   

     avahi-devel   

     avahi   

     avahi-libs   

     avahi-gobject-devel   

     avahi-compat-libdns_sd   

     avahi-ui-devel   

     avahi-glib   

     avahi-ui   

     avahi-compat-libdns_sd-devel   

     avahi-tools   

     avahi-compat-howl-devel   

KY3.4-4A:

x86_64:

     avahi-help   

     avahi-gobject   

     avahi-qt5-devel   

     avahi-glib-devel   

     avahi-devel   

     avahi-qt5   

     avahi-compat-libdns_sd   

     avahi-tools   

     avahi-ui-devel   

     avahi-compat-howl   

     avahi-compat-libdns_sd-devel   

     avahi-gobject-devel   

     avahi-ui   

     avahi-libs   

     avahi-autoipd   

     avahi-glib   

     avahi-compat-howl-devel   

     avahi-dnsconfd   

     avahi   

     avahi-ui-gtk3   

aarch64:

     avahi-help   

     avahi-compat-libdns_sd-devel   

     avahi-compat-libdns_sd   

     avahi-qt5-devel   

     avahi-ui-gtk3   

     avahi-compat-howl-devel   

     avahi-glib   

     avahi-libs   

     avahi-compat-howl   

     avahi-devel   

     avahi-tools   

     avahi-autoipd   

     avahi   

     avahi-gobject-devel   

     avahi-ui   

     avahi-qt5   

     avahi-dnsconfd   

     avahi-gobject   

     avahi-glib-devel   

     avahi-ui-devel   

KY3.4-5A:

x86_64:

     avahi-help   

     avahi-glib   

     avahi-gobject   

     avahi-libs   

     avahi-qt5-devel   

     avahi-gobject-devel   

     avahi-ui-devel   

     avahi-glib-devel   

     avahi-compat-howl-devel   

     avahi-ui-gtk3   

     avahi-compat-libdns_sd   

     avahi-compat-howl   

     avahi-autoipd   

     avahi-compat-libdns_sd-devel   

     avahi-dnsconfd   

     avahi-ui   

     avahi   

     avahi-tools   

     avahi-devel   

     avahi-qt5   

aarch64:

     avahi-help   

     avahi-compat-libdns_sd   

     avahi-glib-devel   

     avahi   

     avahi-libs   

     avahi-ui-devel   

     avahi-glib   

     avahi-gobject-devel   

     avahi-autoipd   

     avahi-dnsconfd   

     avahi-qt5   

     avahi-compat-howl   

     avahi-gobject   

     avahi-compat-libdns_sd-devel   

     avahi-ui-gtk3   

     avahi-devel   

     avahi-ui   

     avahi-compat-howl-devel   

     avahi-qt5-devel   

     avahi-tools   

KY3.5.2:

x86_64:

     avahi-help   

     avahi   

     avahi-compat-libdns_sd-devel   

     avahi-tools   

     avahi-glib   

     avahi-ui   

     avahi-gobject   

     avahi-ui-devel   

     avahi-devel   

     avahi-compat-libdns_sd   

     avahi-ui-gtk3   

     avahi-libs   

     avahi-compat-howl   

     avahi-autoipd   

     avahi-compat-howl-devel   

     avahi-glib-devel   

     avahi-gobject-devel   

     avahi-dnsconfd   

aarch64:

     avahi-help   

     avahi-ui-devel   

     avahi-ui-gtk3   

     avahi-gobject   

     avahi-glib   

     avahi-libs   

     avahi-compat-howl   

     avahi   

     avahi-autoipd   

     avahi-ui   

     avahi-compat-libdns_sd   

     avahi-compat-libdns_sd-devel   

     avahi-devel   

     avahi-dnsconfd   

     avahi-compat-howl-devel   

     avahi-gobject-devel   

     avahi-tools   

     avahi-glib-devel   

上一篇:KylinSec-SA-2023-1832 下一篇:KylinSec-SA-2023-1946