Bugzilla – Bug 1215947
VUL-0: CVE-2023-38470: avahi: Reachable assertion in avahi_escape_label
Last modified: 2024-05-06 12:31:29 UTC
A reachable assertion was found in avahi_escape_label. References: https://github.com/lathiat/avahi/issues/454 References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38470
Affected packages: - SUSE:ALP:Source:Standard:1.0/avahi - SUSE:SLE-12-SP2:Update/avahi - SUSE:SLE-15-SP1:Update/avahi - SUSE:SLE-15-SP4:Update/avahi - openSUSE:Factory/avahi Upstream patch: https://github.com/lathiat/avahi/pull/457/files
Alynx, can you help on this please? Thanks.
https://build.opensuse.org/request/show/1121540 For GNOME:Factory.
https://build.opensuse.org/request/show/1121620 For GNOME:STABLE:41
This is an autogenerated message for OBS integration: This bug (1215947) was mentioned in https://build.opensuse.org/request/show/1121609 Factory / avahi
https://build.suse.de/request/show/312163 For Devel:Desktop:SLE12:SP2 https://build.suse.de/request/show/312162 For Devel:Desktop:SLE-15-SP1
https://build.suse.de/request/show/312269 For SLE-15-SP1 https://build.suse.de/request/show/312268 For SLE-15-SP4 https://build.suse.de/request/show/312272 For ALP:Source:Standard:1.0
SUSE-SU-2023:4503-1: An update that solves two vulnerabilities can now be installed. Category: security (moderate) Bug References: 1215947, 1216419 CVE References: CVE-2023-38470, CVE-2023-38473 Sources used: openSUSE Leap 15.4 (src): avahi-glib2-0.8-150400.7.10.1, avahi-0.8-150400.7.10.1, avahi-qt5-0.8-150400.7.10.1 openSUSE Leap Micro 5.3 (src): avahi-0.8-150400.7.10.1 openSUSE Leap Micro 5.4 (src): avahi-0.8-150400.7.10.1 openSUSE Leap 15.5 (src): avahi-glib2-0.8-150400.7.10.1, avahi-0.8-150400.7.10.1, avahi-qt5-0.8-150400.7.10.1 SUSE Linux Enterprise Micro for Rancher 5.3 (src): avahi-0.8-150400.7.10.1 SUSE Linux Enterprise Micro 5.3 (src): avahi-0.8-150400.7.10.1 SUSE Linux Enterprise Micro for Rancher 5.4 (src): avahi-0.8-150400.7.10.1 SUSE Linux Enterprise Micro 5.4 (src): avahi-0.8-150400.7.10.1 SUSE Linux Enterprise Micro 5.5 (src): avahi-0.8-150400.7.10.1 Basesystem Module 15-SP4 (src): avahi-glib2-0.8-150400.7.10.1, avahi-0.8-150400.7.10.1 Basesystem Module 15-SP5 (src): avahi-glib2-0.8-150400.7.10.1, avahi-0.8-150400.7.10.1 Desktop Applications Module 15-SP4 (src): avahi-glib2-0.8-150400.7.10.1, avahi-0.8-150400.7.10.1 Desktop Applications Module 15-SP5 (src): avahi-glib2-0.8-150400.7.10.1, avahi-0.8-150400.7.10.1 SUSE Package Hub 15 15-SP4 (src): avahi-0.8-150400.7.10.1 SUSE Package Hub 15 15-SP5 (src): avahi-0.8-150400.7.10.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:4910-1: An update that solves two vulnerabilities can now be installed. Category: security (moderate) Bug References: 1215947, 1216419 CVE References: CVE-2023-38470, CVE-2023-38473 Sources used: openSUSE Leap 15.4 (src): avahi-glib2-0.7-150100.3.29.1 SUSE Manager Proxy 4.2 (src): avahi-glib2-0.7-150100.3.29.1, avahi-0.7-150100.3.29.1 SUSE Manager Retail Branch Server 4.2 (src): avahi-glib2-0.7-150100.3.29.1, avahi-0.7-150100.3.29.1 SUSE Manager Server 4.2 (src): avahi-glib2-0.7-150100.3.29.1, avahi-0.7-150100.3.29.1 SUSE Linux Enterprise Micro 5.2 (src): avahi-0.7-150100.3.29.1 SUSE Linux Enterprise Micro for Rancher 5.2 (src): avahi-0.7-150100.3.29.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2024:1500-1: An update that solves two vulnerabilities can now be installed. Category: security (moderate) Bug References: 1215947, 1216853 CVE References: CVE-2023-38470, CVE-2023-38472 Maintenance Incident: [SUSE:Maintenance:33589](https://smelt.suse.de/incident/33589/) Sources used: SUSE Linux Enterprise Workstation Extension 12 12-SP5 (src): avahi-glib2-0.6.32-32.27.1 SUSE Linux Enterprise Software Development Kit 12 SP5 (src): avahi-0.6.32-32.27.1, avahi-glib2-0.6.32-32.27.1 SUSE Linux Enterprise High Performance Computing 12 SP5 (src): avahi-0.6.32-32.27.1, avahi-glib2-0.6.32-32.27.1 SUSE Linux Enterprise Server 12 SP5 (src): avahi-0.6.32-32.27.1, avahi-glib2-0.6.32-32.27.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5 (src): avahi-0.6.32-32.27.1, avahi-glib2-0.6.32-32.27.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.