USN-3876-2: Avahi vulnerabilities

Releases

• Ubuntu 12.04

Packages

• avahi - Avahi IPv4LL network address configuration daemon

Details

USN-3876-1 fixed a vulnerability in Avahi. This update provides
the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

Chad Seaman discovered that Avahi incorrectly handled certain messages.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2017-6519, CVE-2018-1000845)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.04

• avahi-daemon - 0.6.30-5ubuntu2.3
• libavahi-core7 - 0.6.30-5ubuntu2.3

In general, a standard system update will make all the necessary changes.

References

• CVE-2017-6519
• CVE-2018-1000845

Related notices

• USN-3876-1: libavahi-compat-libdnssd1, avahi-utils, python-avahi, libavahi-gobject0, avahi-ui-utils, libavahi-common3-udeb, libavahi-ui-gtk3-0, gir1.2-avahi-0.6, libavahi-common3, avahi-daemon, libavahi-core-dev, avahi-autoipd, libavahi-gobject-dev, libavahi-client3, libavahi-common-dev, avahi, libavahi-core7-udeb, libavahi-ui-dev, libavahi-glib1, libavahi-qt4-1, libavahi-qt4-dev, libavahi-common-data, avahi-discover, libavahi-ui0, libavahi-ui-gtk3-dev, libavahi-client-dev, libavahi-core7, libavahi-glib-dev, libavahi-compat-libdnssd-dev, avahi-dnsconfd