Oval Definition:oval:com.redhat.rhsa:def:20090013
Revision Date:2009-01-12Version:638
Title:RHSA-2009:0013: avahi security update (Moderate)
Description:Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zeroconf Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, see printers to print to, and find shared files on other computers.

  • Hugo Dias discovered a denial of service flaw in avahi-daemon. A remote attacker on the same local area network (LAN) could send a specially-crafted mDNS (Multicast DNS) packet that would cause avahi-daemon to exit unexpectedly due to a failed assertion check. (CVE-2008-5081)

    All users are advised to upgrade to these updated packages, which contain a backported patch which resolves this issue. After installing the update, avahi-daemon will be restarted automatically.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2008-5081
    RHSA-2009:0013
    RHSA-2009:0013-01
    RHSA-2009:0013-01
    Platform(s):Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • avahi is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi is signed with Red Hat redhatrelease2 key
  • avahi-compat-howl is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-compat-howl is signed with Red Hat redhatrelease2 key
  • avahi-compat-howl-devel is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-compat-howl-devel is signed with Red Hat redhatrelease2 key
  • avahi-compat-libdns_sd is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-compat-libdns_sd is signed with Red Hat redhatrelease2 key
  • avahi-compat-libdns_sd-devel is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-compat-libdns_sd-devel is signed with Red Hat redhatrelease2 key
  • avahi-devel is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-devel is signed with Red Hat redhatrelease2 key
  • avahi-glib is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-glib is signed with Red Hat redhatrelease2 key
  • avahi-glib-devel is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-glib-devel is signed with Red Hat redhatrelease2 key
  • avahi-qt3 is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-qt3 is signed with Red Hat redhatrelease2 key
  • avahi-qt3-devel is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-qt3-devel is signed with Red Hat redhatrelease2 key
  • avahi-tools is earlier than 0:0.6.16-1.el5_2.1
  • AND avahi-tools is signed with Red Hat redhatrelease2 key
  • BACK