Security update for avahi SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1845-1 Final 1 1 2021-06-03T15:52:34Z current 2021-06-03T15:52:34Z 2021-06-03T15:52:34Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for avahi This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in client_work (bsc#1184521). - CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh (bsc#1180827) - Update avahi-daemon-check-dns.sh from Debian. Our previous version relied on ifconfig, route, and init.d. - Add sudo to requires: used to drop privileges. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-Azure-BYOS-2021-1845,Image SLES15-EC2-HVM-BYOS-2021-1845,Image SLES15-GCE-BYOS-2021-1845,Image SLES15-SAP-Azure-2021-1845,Image SLES15-SAP-Azure-BYOS-2021-1845,Image SLES15-SAP-Azure-LI-BYOS-Production-2021-1845,Image SLES15-SAP-Azure-VLI-BYOS-Production-2021-1845,Image SLES15-SAP-EC2-HVM-2021-1845,Image SLES15-SAP-EC2-HVM-BYOS-2021-1845,Image SLES15-SAP-GCE-2021-1845,Image SLES15-SAP-GCE-BYOS-2021-1845,SUSE-2021-1845,SUSE-SLE-Product-HPC-15-2021-1845,SUSE-SLE-Product-SLES-15-2021-1845,SUSE-SLE-Product-SLES_SAP-15-2021-1845 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211845-1/ Link for SUSE-SU-2021:1845-1 https://lists.suse.com/pipermail/sle-security-updates/2021-June/008925.html E-Mail link for SUSE-SU-2021:1845-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1180827 SUSE Bug 1180827 https://bugzilla.suse.com/1184521 SUSE Bug 1184521 https://www.suse.com/security/cve/CVE-2021-26720/ SUSE CVE CVE-2021-26720 page https://www.suse.com/security/cve/CVE-2021-3468/ SUSE CVE CVE-2021-3468 page Image SLES15-Azure-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-GCE-BYOS Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 libavahi-client3-0.6.32-5.13.1 libavahi-common3-0.6.32-5.13.1 libdns_sd-0.6.32-5.13.1 avahi-0.6.32-5.13.1 avahi-autoipd-0.6.32-5.13.1 avahi-compat-howl-devel-0.6.32-5.13.1 avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 avahi-lang-0.6.32-5.13.1 avahi-utils-0.6.32-5.13.1 avahi-utils-gtk-0.6.32-5.13.1 libavahi-client3-32bit-0.6.32-5.13.1 libavahi-client3-64bit-0.6.32-5.13.1 libavahi-common3-32bit-0.6.32-5.13.1 libavahi-common3-64bit-0.6.32-5.13.1 libavahi-core7-0.6.32-5.13.1 libavahi-devel-0.6.32-5.13.1 libavahi-glib-devel-0.6.32-5.13.1 libavahi-glib1-0.6.32-5.13.1 libavahi-glib1-32bit-0.6.32-5.13.1 libavahi-glib1-64bit-0.6.32-5.13.1 libavahi-gobject-devel-0.6.32-5.13.1 libavahi-gobject0-0.6.32-5.13.1 libavahi-ui-gtk3-0-0.6.32-5.13.1 libavahi-ui0-0.6.32-5.13.1 libdns_sd-32bit-0.6.32-5.13.1 libdns_sd-64bit-0.6.32-5.13.1 libhowl0-0.6.32-5.13.1 python-avahi-0.6.32-5.13.1 python-avahi-gtk-0.6.32-5.13.1 typelib-1_0-Avahi-0_6-0.6.32-5.13.1 libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-Azure-BYOS libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-Azure-BYOS libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-EC2-HVM-BYOS libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-EC2-HVM-BYOS libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-GCE-BYOS libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-GCE-BYOS libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure-BYOS libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure-BYOS libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libdns_sd-0.6.32-5.13.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-EC2-HVM libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-EC2-HVM libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-GCE libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-GCE libavahi-client3-0.6.32-5.13.1 as a component of Image SLES15-SAP-GCE-BYOS libavahi-common3-0.6.32-5.13.1 as a component of Image SLES15-SAP-GCE-BYOS avahi-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS avahi-autoipd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS avahi-compat-howl-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS avahi-lang-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS avahi-utils-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS avahi-utils-gtk-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-client3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-client3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-common3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-common3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-core7-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-glib-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-glib1-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-gobject-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-gobject0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-ui-gtk3-0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libavahi-ui0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libdns_sd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libhowl0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS typelib-1_0-Avahi-0_6-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS avahi-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS avahi-autoipd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS avahi-compat-howl-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS avahi-lang-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS avahi-utils-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS avahi-utils-gtk-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-client3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-client3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-common3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-common3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-core7-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-glib-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-glib1-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-gobject-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-gobject0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-ui-gtk3-0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libavahi-ui0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libdns_sd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libhowl0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS typelib-1_0-Avahi-0_6-0.6.32-5.13.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS avahi-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS avahi-autoipd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS avahi-compat-howl-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS avahi-lang-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS avahi-utils-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS avahi-utils-gtk-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-client3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-client3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-common3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-common3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-core7-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-glib-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-glib1-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-gobject-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-gobject0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-ui-gtk3-0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libavahi-ui0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libdns_sd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS libhowl0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS typelib-1_0-Avahi-0_6-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server 15-LTSS avahi-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 avahi-autoipd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 avahi-compat-howl-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 avahi-lang-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 avahi-utils-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 avahi-utils-gtk-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-client3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-client3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-common3-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-common3-32bit-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-core7-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-glib-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-glib1-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-gobject-devel-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-gobject0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-ui-gtk3-0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libavahi-ui0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libdns_sd-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libhowl0-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 typelib-1_0-Avahi-0_6-0.6.32-5.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE), not the upstream Avahi product. CVE-2021-26720 Image SLES15-Azure-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-Azure-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-EC2-HVM-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-EC2-HVM-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-GCE-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-GCE-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libdns_sd-0.6.32-5.13.1 Image SLES15-SAP-Azure:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-GCE-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-GCE-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-GCE:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-GCE:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211845-1/ https://www.suse.com/security/cve/CVE-2021-26720.html CVE-2021-26720 https://bugzilla.suse.com/1180827 SUSE Bug 1180827 https://bugzilla.suse.com/1180865 SUSE Bug 1180865 https://bugzilla.suse.com/1181852 SUSE Bug 1181852 https://bugzilla.suse.com/1186412 SUSE Bug 1186412 https://bugzilla.suse.com/1205048 SUSE Bug 1205048 A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered. CVE-2021-3468 Image SLES15-Azure-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-Azure-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-EC2-HVM-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-EC2-HVM-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-GCE-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-GCE-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure-LI-BYOS-Production:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:libdns_sd-0.6.32-5.13.1 Image SLES15-SAP-Azure:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-Azure:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-EC2-HVM:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-GCE-BYOS:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-GCE-BYOS:libavahi-common3-0.6.32-5.13.1 Image SLES15-SAP-GCE:libavahi-client3-0.6.32-5.13.1 Image SLES15-SAP-GCE:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise Server 15-LTSS:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-autoipd-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-compat-howl-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-compat-mDNSResponder-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-lang-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-utils-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:avahi-utils-gtk-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-client3-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-client3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-common3-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-common3-32bit-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-core7-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-glib-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-glib1-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-gobject-devel-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-gobject0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-ui-gtk3-0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libavahi-ui0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libdns_sd-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:libhowl0-0.6.32-5.13.1 SUSE Linux Enterprise Server for SAP Applications 15:typelib-1_0-Avahi-0_6-0.6.32-5.13.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211845-1/ https://www.suse.com/security/cve/CVE-2021-3468.html CVE-2021-3468 https://bugzilla.suse.com/1184521 SUSE Bug 1184521