Zwei Probleme in Avahi
ID: | USN-3876-1 |
Distribution: | Ubuntu |
Plattformen: | Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 18.10 |
Datum: | Do, 31. Januar 2019, 15:27 |
Referenzen: | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000845
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6519 |
Applikationen: | Avahi |
Originalnachricht |
|
--===============0223761727717424069== Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-G+MRP7GrjMCMV+ie4wA4" --=-G+MRP7GrjMCMV+ie4wA4 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 ========================================================================== Ubuntu Security Notice USN-3876-1 January 31, 2019 avahi vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Avahi. Software Description: - avahi: Avahi IPv4LL network address configuration daemon Details: Chad Seaman discovered that Avahi incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-6519, CVE-2018-1000845) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: avahi-daemon 0.7-4ubuntu2.1 libavahi-core7 0.7-4ubuntu2.1 Ubuntu 18.04 LTS: avahi-daemon 0.7-3.1ubuntu1.2 libavahi-core7 0.7-3.1ubuntu1.2 Ubuntu 16.04 LTS: avahi-daemon 0.6.32~rc+dfsg-1ubuntu2.3 libavahi-core7 0.6.32~rc+dfsg-1ubuntu2.3 Ubuntu 14.04 LTS: avahi-daemon 0.6.31-4ubuntu1.3 libavahi-core7 0.6.31-4ubuntu1.3 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/usn/usn-3876-1 CVE-2017-6519, CVE-2018-1000845 Package Information: https://launchpad.net/ubuntu/+source/avahi/0.7-4ubuntu2.1 https://launchpad.net/ubuntu/+source/avahi/0.7-3.1ubuntu1.2 https://launchpad.net/ubuntu/+source/avahi/0.6.32~rc+dfsg-1ubuntu2.3 https://launchpad.net/ubuntu/+source/avahi/0.6.31-4ubuntu1.3 |