Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseOPENSUSE-SU-2021:1845-1
HistoryJul 11, 2021 - 12:00 a.m.

Security update for avahi (important)

2021-07-1100:00:00
lists.opensuse.org
15

0.0004 Low

EPSS

Percentile

5.1%

JSON

An update that fixes two vulnerabilities is now available.

Description:

This update for avahi fixes the following issues:

  • CVE-2021-3468: avoid infinite loop by handling HUP event in client_work
    (bsc#1184521).
  • CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh
    (bsc#1180827)
  • Update avahi-daemon-check-dns.sh from Debian. Our previous version
    relied on ifconfig, route, and init.d.
  • Add sudo to requires: used to drop privileges.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2021-1845=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.3aarch64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm
openSUSE Leap15.3ppc64le< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm
openSUSE Leap15.3s390x< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm
openSUSE Leap15.3x86_64< - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm

Related

debian 2
nessus 37
osv 9
openvas 25
prion 2
cvelist 2
ubuntucve 2
cbl_mariner 4
cve 2
nvd 2
rosalinux 2
suse 2
debiancve 2
alpinelinux 2
mageia 1
amazon 1
cnvd 1
altlinux 1
redhatcve 1
cgr 1
ubuntu 2
veracode 1
wolfi 1
oraclelinux 2
almalinux 2
redhat 14
rocky 1
ibm 1
avleonov 1
debian
debian
[SECURITY] [DLA 3047-1] avahi security update
2022-06-07 18:23:35
[SECURITY] [DLA 3466-1] avahi security update
2023-06-21 22:49:21
nessus
nessus
Debian DLA-3047-1 : avahi - LTS security update
2022-06-08 00:00:00
openSUSE 15 Security Update : avahi (openSUSE-SU-2021:1845-1)
2021-07-16 00:00:00
SUSE SLES15 Security Update : avahi (SUSE-SU-2021:1845-1)
2021-06-04 00:00:00
osv
osv
avahi - security update
2022-06-07 00:00:00
CVE-2021-26720
2021-02-17 22:15:12
CVE-2021-3468
2021-06-02 16:15:08
openvas
openvas
Debian: Security Advisory (DLA-3047-1)
2022-06-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1845-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for avahi (openSUSE-SU-2021:1845-1)
2021-07-13 00:00:00
prion
prion
Code injection
2021-02-17 22:15:00
Design/Logic Flaw
2021-06-02 16:15:00
cvelist
cvelist
CVE-2021-26720
2021-02-17 21:19:26
CVE-2021-3468
2021-06-02 15:09:21
ubuntucve
ubuntucve
CVE-2021-26720
2021-02-17 00:00:00
CVE-2021-3468
2021-06-02 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-26720 affecting package avahi for versions less than 0.8-1
2024-03-19 17:21:46
CVE-2021-26720 affecting package avahi for versions less than 0.8-1
2022-04-26 19:39:28
CVE-2021-3468 affecting package avahi for versions less than 0.8-1
2024-03-19 17:21:46
cve
cve
CVE-2021-26720
2021-02-17 22:15:12
CVE-2021-3468
2021-06-02 16:15:08
nvd
nvd
CVE-2021-26720
2021-02-17 22:15:12
CVE-2021-3468
2021-06-02 16:15:08
rosalinux
rosalinux
Advisory ROSA-SA-2021-1807
2021-07-02 16:32:18
Advisory ROSA-SA-2023-2243
2023-10-10 09:47:00
suse
suse
Security update for avahi (moderate)
2021-03-03 00:00:00
Security update for avahi (moderate)
2021-05-10 00:00:00
debiancve
debiancve
CVE-2021-26720
2021-02-17 22:15:12
CVE-2021-3468
2021-06-02 16:15:08
alpinelinux
alpinelinux
CVE-2021-26720
2021-02-17 22:15:12
CVE-2021-3468
2021-06-02 16:15:08
mageia
mageia
Updated avahi packages fix a security vulnerability
2021-05-16 23:54:14
amazon
amazon
Medium: avahi
2023-11-29 22:20:00
cnvd
cnvd
Avahi has unspecified vulnerabilities
2021-05-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package avahi version 0.8-alt2
2021-04-30 00:00:00
redhatcve
redhatcve
CVE-2021-3468
2021-03-26 14:06:34
cgr
cgr
CVE-2021-3468 vulnerabilities
2024-05-19 03:07:16
ubuntu
ubuntu
Avahi vulnerability
2021-07-07 00:00:00
Avahi vulnerabilities
2021-07-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-06-22 16:34:49
wolfi
wolfi
CVE-2021-3468 vulnerabilities
2024-07-05 21:08:40
oraclelinux
oraclelinux
avahi security update
2023-11-11 00:00:00
avahi security update
2023-12-15 00:00:00
almalinux
almalinux
Moderate: avahi security update
2023-11-07 00:00:00
Moderate: avahi security update
2023-12-14 00:00:00
redhat
redhat
(RHSA-2023:6707) Moderate: avahi security update
2023-11-07 06:12:33
(RHSA-2023:7836) Moderate: avahi security update
2023-12-14 08:16:14
(RHSA-2024:0418) Moderate: avahi security update
2024-01-24 14:40:25
rocky
rocky
avahi security update
2024-01-09 04:07:32
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-01-31 19:31:55
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for OPENSUSE-SU-2021:1845-1
debian2nessus37osv9openvas25prion2cvelist2ubuntucve2cbl_mariner4cve2nvd2rosalinux2suse2debiancve2alpinelinux2mageia1amazon1cnvd1altlinux1redhatcve1cgr1ubuntu2veracode1wolfi1oraclelinux2almalinux2redhat14rocky1ibm1avleonov1