avahi-0.6.16-10.AXS3

エラータID: AXSA:2011-237:01

Release date: 
Monday, July 25, 2011 - 20:31
Subject: 
avahi-0.6.16-10.AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

Avahi is a system which facilitates service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is already found in MacOS X (branded 'Rendezvous', 'Bonjour' and sometimes 'ZeroConf') and is very convenient.
Security issues fixed with this release:
CVE-2011-1002
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty (1) IPv4 or (2) IPv6 UDP packet to port 5353.
NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

Solution: 

Update packages.

CVEs: 
CVE-2011-1002
avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.


Additional Info: 

From Asianux Server 3 SP4.

Download: 

SRPMS
  1. avahi-0.6.16-10.AXS3.src.rpm
    MD5: 8403af2cc3986c19e8381abe2c7993b1
    SHA-256: 6d02aa72bd8349a3fc517661b16215dde2ee2d9f9359e6e01d1b4b28d18cd2eb
    Size: 890.24 kB

Asianux Server 3 for x86
  1. avahi-0.6.16-10.AXS3.i386.rpm
    MD5: e2220a6d906373be001df1f9d38a663d
    SHA-256: 08031ed00b7e17eddacec49282e2a32a49180ccb08aeb91310af2db8231a08d8
    Size: 252.40 kB
  2. avahi-compat-libdns_sd-0.6.16-10.AXS3.i386.rpm
    MD5: 47169c92a8c07e378c1ee2d9d56840a8
    SHA-256: a6867a8a554adc096a907dae652cbeba09a0288cf0f705c0a36f0b2b4173dae1
    Size: 23.50 kB
  3. avahi-compat-libdns_sd-devel-0.6.16-10.AXS3.i386.rpm
    MD5: 7205ed46fd9f644c12d42f4e2729b8cc
    SHA-256: 186e0985a35c2eba79cdd876850a3da1a9f3cad54c9d7b8aff7443fc2c8939f1
    Size: 28.17 kB
  4. avahi-glib-0.6.16-10.AXS3.i386.rpm
    MD5: 9b233e7b10cac063ad0f2637585c47eb
    SHA-256: 21591465c99f5e1f83576287f4edb6ecd9bb5dd37d0b2e5f6b5026896a8c2b2e
    Size: 14.94 kB

Asianux Server 3 for x86_64
  1. avahi-0.6.16-10.AXS3.x86_64.rpm
    MD5: dd865bfe3cd232e674117838cec8cf0a
    SHA-256: 93cdb4a3430d3f3d7b49e90d9651cfec632e3dbffe99e0302fcbfe91427bd834
    Size: 259.15 kB
  2. avahi-compat-libdns_sd-0.6.16-10.AXS3.x86_64.rpm
    MD5: e148f34467dbd38589674c628a9554c6
    SHA-256: c8f62b63f1468d40bd25cd7dcf9a70b575a5570f842380832e3bc0cd26bd3786
    Size: 24.42 kB
  3. avahi-compat-libdns_sd-devel-0.6.16-10.AXS3.x86_64.rpm
    MD5: 797bbf6369a63917279452cf2f48ffea
    SHA-256: 9dd091f3e3e858aefd44d2910cd940ea5c9888aac03c5cd43b5754da8edf0827
    Size: 28.17 kB
  4. avahi-glib-0.6.16-10.AXS3.x86_64.rpm
    MD5: b9750ee9d89903900d36cb9b21b72ac0
    SHA-256: 018b42db65c372ca279985178c238223e3c91eb49d3650168d30cfade7e600b8
    Size: 14.87 kB