-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================                   Red Hat Security Advisory

Synopsis:          Low: avahi security update
Advisory ID:       RHSA-2020:1176-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2020:1176
Issue date:        2020-03-31
CVE Names:         CVE-2017-6519 
====================================================================
1. Summary:

An update for avahi is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact
of Low. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64

3. Description:

Avahi is an implementation of the DNS Service Discovery and Multicast DNS
specifications for Zero Configuration Networking. It facilitates service
discovery on a local network. Avahi and Avahi-aware applications allow you
to plug your computer into a network and, with no configuration, view other
people to chat with, view printers to print with, and find shared files on
other computers.

Security Fix(es):

* avahi: Multicast DNS responds to unicast queries outside of local network
(CVE-2017-6519)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the update, avahi-daemon will be restarted automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

1426712 - CVE-2017-6519 avahi: Multicast DNS responds to unicast queries outside of local network

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Server (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

ppc64:
avahi-0.6.31-20.el7.ppc.rpm
avahi-0.6.31-20.el7.ppc64.rpm
avahi-autoipd-0.6.31-20.el7.ppc64.rpm
avahi-debuginfo-0.6.31-20.el7.ppc.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64.rpm
avahi-glib-0.6.31-20.el7.ppc.rpm
avahi-glib-0.6.31-20.el7.ppc64.rpm
avahi-gobject-0.6.31-20.el7.ppc.rpm
avahi-gobject-0.6.31-20.el7.ppc64.rpm
avahi-libs-0.6.31-20.el7.ppc.rpm
avahi-libs-0.6.31-20.el7.ppc64.rpm
avahi-ui-gtk3-0.6.31-20.el7.ppc.rpm
avahi-ui-gtk3-0.6.31-20.el7.ppc64.rpm

ppc64le:
avahi-0.6.31-20.el7.ppc64le.rpm
avahi-autoipd-0.6.31-20.el7.ppc64le.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64le.rpm
avahi-glib-0.6.31-20.el7.ppc64le.rpm
avahi-gobject-0.6.31-20.el7.ppc64le.rpm
avahi-libs-0.6.31-20.el7.ppc64le.rpm
avahi-ui-gtk3-0.6.31-20.el7.ppc64le.rpm

s390x:
avahi-0.6.31-20.el7.s390.rpm
avahi-0.6.31-20.el7.s390x.rpm
avahi-autoipd-0.6.31-20.el7.s390x.rpm
avahi-debuginfo-0.6.31-20.el7.s390.rpm
avahi-debuginfo-0.6.31-20.el7.s390x.rpm
avahi-glib-0.6.31-20.el7.s390.rpm
avahi-glib-0.6.31-20.el7.s390x.rpm
avahi-gobject-0.6.31-20.el7.s390.rpm
avahi-gobject-0.6.31-20.el7.s390x.rpm
avahi-libs-0.6.31-20.el7.s390.rpm
avahi-libs-0.6.31-20.el7.s390x.rpm
avahi-ui-gtk3-0.6.31-20.el7.s390.rpm
avahi-ui-gtk3-0.6.31-20.el7.s390x.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
avahi-compat-howl-0.6.31-20.el7.ppc.rpm
avahi-compat-howl-0.6.31-20.el7.ppc64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.ppc.rpm
avahi-compat-howl-devel-0.6.31-20.el7.ppc64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.ppc.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.ppc64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc64.rpm
avahi-debuginfo-0.6.31-20.el7.ppc.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64.rpm
avahi-devel-0.6.31-20.el7.ppc.rpm
avahi-devel-0.6.31-20.el7.ppc64.rpm
avahi-dnsconfd-0.6.31-20.el7.ppc64.rpm
avahi-glib-devel-0.6.31-20.el7.ppc.rpm
avahi-glib-devel-0.6.31-20.el7.ppc64.rpm
avahi-gobject-devel-0.6.31-20.el7.ppc.rpm
avahi-gobject-devel-0.6.31-20.el7.ppc64.rpm
avahi-qt3-0.6.31-20.el7.ppc.rpm
avahi-qt3-0.6.31-20.el7.ppc64.rpm
avahi-qt3-devel-0.6.31-20.el7.ppc.rpm
avahi-qt3-devel-0.6.31-20.el7.ppc64.rpm
avahi-qt4-0.6.31-20.el7.ppc.rpm
avahi-qt4-0.6.31-20.el7.ppc64.rpm
avahi-qt4-devel-0.6.31-20.el7.ppc.rpm
avahi-qt4-devel-0.6.31-20.el7.ppc64.rpm
avahi-tools-0.6.31-20.el7.ppc64.rpm
avahi-ui-0.6.31-20.el7.ppc.rpm
avahi-ui-0.6.31-20.el7.ppc64.rpm
avahi-ui-devel-0.6.31-20.el7.ppc.rpm
avahi-ui-devel-0.6.31-20.el7.ppc64.rpm
avahi-ui-tools-0.6.31-20.el7.ppc64.rpm

ppc64le:
avahi-compat-howl-0.6.31-20.el7.ppc64le.rpm
avahi-compat-howl-devel-0.6.31-20.el7.ppc64le.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.ppc64le.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc64le.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64le.rpm
avahi-devel-0.6.31-20.el7.ppc64le.rpm
avahi-dnsconfd-0.6.31-20.el7.ppc64le.rpm
avahi-glib-devel-0.6.31-20.el7.ppc64le.rpm
avahi-gobject-devel-0.6.31-20.el7.ppc64le.rpm
avahi-qt3-0.6.31-20.el7.ppc64le.rpm
avahi-qt3-devel-0.6.31-20.el7.ppc64le.rpm
avahi-qt4-0.6.31-20.el7.ppc64le.rpm
avahi-qt4-devel-0.6.31-20.el7.ppc64le.rpm
avahi-tools-0.6.31-20.el7.ppc64le.rpm
avahi-ui-0.6.31-20.el7.ppc64le.rpm
avahi-ui-devel-0.6.31-20.el7.ppc64le.rpm
avahi-ui-tools-0.6.31-20.el7.ppc64le.rpm

s390x:
avahi-compat-howl-0.6.31-20.el7.s390.rpm
avahi-compat-howl-0.6.31-20.el7.s390x.rpm
avahi-compat-howl-devel-0.6.31-20.el7.s390.rpm
avahi-compat-howl-devel-0.6.31-20.el7.s390x.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.s390.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.s390x.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.s390.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.s390x.rpm
avahi-debuginfo-0.6.31-20.el7.s390.rpm
avahi-debuginfo-0.6.31-20.el7.s390x.rpm
avahi-devel-0.6.31-20.el7.s390.rpm
avahi-devel-0.6.31-20.el7.s390x.rpm
avahi-dnsconfd-0.6.31-20.el7.s390x.rpm
avahi-glib-devel-0.6.31-20.el7.s390.rpm
avahi-glib-devel-0.6.31-20.el7.s390x.rpm
avahi-gobject-devel-0.6.31-20.el7.s390.rpm
avahi-gobject-devel-0.6.31-20.el7.s390x.rpm
avahi-qt3-0.6.31-20.el7.s390.rpm
avahi-qt3-0.6.31-20.el7.s390x.rpm
avahi-qt3-devel-0.6.31-20.el7.s390.rpm
avahi-qt3-devel-0.6.31-20.el7.s390x.rpm
avahi-qt4-0.6.31-20.el7.s390.rpm
avahi-qt4-0.6.31-20.el7.s390x.rpm
avahi-qt4-devel-0.6.31-20.el7.s390.rpm
avahi-qt4-devel-0.6.31-20.el7.s390x.rpm
avahi-tools-0.6.31-20.el7.s390x.rpm
avahi-ui-0.6.31-20.el7.s390.rpm
avahi-ui-0.6.31-20.el7.s390x.rpm
avahi-ui-devel-0.6.31-20.el7.s390.rpm
avahi-ui-devel-0.6.31-20.el7.s390x.rpm
avahi-ui-tools-0.6.31-20.el7.s390x.rpm

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2017-6519
https://access.redhat.com/security/updates/classification/#low
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2020 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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te5C
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2020-1176:01 Low: avahi security update

An update for avahi is now available for Red Hat Enterprise Linux 7

Summary

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.
Security Fix(es):
* avahi: Multicast DNS responds to unicast queries outside of local network (CVE-2017-6519)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.



Summary


Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the update, avahi-daemon will be restarted automatically.

References

https://access.redhat.com/security/cve/CVE-2017-6519 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index

Package List

Red Hat Enterprise Linux Client (v. 7):
Source: avahi-0.6.31-20.el7.src.rpm
x86_64: avahi-0.6.31-20.el7.i686.rpm avahi-0.6.31-20.el7.x86_64.rpm avahi-autoipd-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-glib-0.6.31-20.el7.i686.rpm avahi-glib-0.6.31-20.el7.x86_64.rpm avahi-gobject-0.6.31-20.el7.i686.rpm avahi-gobject-0.6.31-20.el7.x86_64.rpm avahi-libs-0.6.31-20.el7.i686.rpm avahi-libs-0.6.31-20.el7.x86_64.rpm avahi-ui-gtk3-0.6.31-20.el7.i686.rpm avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm
Red Hat Enterprise Linux Client Optional (v. 7):
x86_64: avahi-compat-howl-0.6.31-20.el7.i686.rpm avahi-compat-howl-0.6.31-20.el7.x86_64.rpm avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-devel-0.6.31-20.el7.i686.rpm avahi-devel-0.6.31-20.el7.x86_64.rpm avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm avahi-glib-devel-0.6.31-20.el7.i686.rpm avahi-glib-devel-0.6.31-20.el7.x86_64.rpm avahi-gobject-devel-0.6.31-20.el7.i686.rpm avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm avahi-qt3-0.6.31-20.el7.i686.rpm avahi-qt3-0.6.31-20.el7.x86_64.rpm avahi-qt3-devel-0.6.31-20.el7.i686.rpm avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm avahi-qt4-0.6.31-20.el7.i686.rpm avahi-qt4-0.6.31-20.el7.x86_64.rpm avahi-qt4-devel-0.6.31-20.el7.i686.rpm avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm avahi-tools-0.6.31-20.el7.x86_64.rpm avahi-ui-0.6.31-20.el7.i686.rpm avahi-ui-0.6.31-20.el7.x86_64.rpm avahi-ui-devel-0.6.31-20.el7.i686.rpm avahi-ui-devel-0.6.31-20.el7.x86_64.rpm avahi-ui-tools-0.6.31-20.el7.x86_64.rpm
Red Hat Enterprise Linux ComputeNode (v. 7):
Source: avahi-0.6.31-20.el7.src.rpm
x86_64: avahi-0.6.31-20.el7.i686.rpm avahi-0.6.31-20.el7.x86_64.rpm avahi-autoipd-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-glib-0.6.31-20.el7.i686.rpm avahi-glib-0.6.31-20.el7.x86_64.rpm avahi-libs-0.6.31-20.el7.i686.rpm avahi-libs-0.6.31-20.el7.x86_64.rpm
Red Hat Enterprise Linux ComputeNode Optional (v. 7):
x86_64: avahi-compat-howl-0.6.31-20.el7.i686.rpm avahi-compat-howl-0.6.31-20.el7.x86_64.rpm avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-devel-0.6.31-20.el7.i686.rpm avahi-devel-0.6.31-20.el7.x86_64.rpm avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm avahi-glib-devel-0.6.31-20.el7.i686.rpm avahi-glib-devel-0.6.31-20.el7.x86_64.rpm avahi-gobject-0.6.31-20.el7.i686.rpm avahi-gobject-0.6.31-20.el7.x86_64.rpm avahi-gobject-devel-0.6.31-20.el7.i686.rpm avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm avahi-qt3-0.6.31-20.el7.i686.rpm avahi-qt3-0.6.31-20.el7.x86_64.rpm avahi-qt3-devel-0.6.31-20.el7.i686.rpm avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm avahi-qt4-0.6.31-20.el7.i686.rpm avahi-qt4-0.6.31-20.el7.x86_64.rpm avahi-qt4-devel-0.6.31-20.el7.i686.rpm avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm avahi-tools-0.6.31-20.el7.x86_64.rpm avahi-ui-0.6.31-20.el7.i686.rpm avahi-ui-0.6.31-20.el7.x86_64.rpm avahi-ui-devel-0.6.31-20.el7.i686.rpm avahi-ui-devel-0.6.31-20.el7.x86_64.rpm avahi-ui-gtk3-0.6.31-20.el7.i686.rpm avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm avahi-ui-tools-0.6.31-20.el7.x86_64.rpm
Red Hat Enterprise Linux Server (v. 7):
Source: avahi-0.6.31-20.el7.src.rpm
ppc64: avahi-0.6.31-20.el7.ppc.rpm avahi-0.6.31-20.el7.ppc64.rpm avahi-autoipd-0.6.31-20.el7.ppc64.rpm avahi-debuginfo-0.6.31-20.el7.ppc.rpm avahi-debuginfo-0.6.31-20.el7.ppc64.rpm avahi-glib-0.6.31-20.el7.ppc.rpm avahi-glib-0.6.31-20.el7.ppc64.rpm avahi-gobject-0.6.31-20.el7.ppc.rpm avahi-gobject-0.6.31-20.el7.ppc64.rpm avahi-libs-0.6.31-20.el7.ppc.rpm avahi-libs-0.6.31-20.el7.ppc64.rpm avahi-ui-gtk3-0.6.31-20.el7.ppc.rpm avahi-ui-gtk3-0.6.31-20.el7.ppc64.rpm
ppc64le: avahi-0.6.31-20.el7.ppc64le.rpm avahi-autoipd-0.6.31-20.el7.ppc64le.rpm avahi-debuginfo-0.6.31-20.el7.ppc64le.rpm avahi-glib-0.6.31-20.el7.ppc64le.rpm avahi-gobject-0.6.31-20.el7.ppc64le.rpm avahi-libs-0.6.31-20.el7.ppc64le.rpm avahi-ui-gtk3-0.6.31-20.el7.ppc64le.rpm
s390x: avahi-0.6.31-20.el7.s390.rpm avahi-0.6.31-20.el7.s390x.rpm avahi-autoipd-0.6.31-20.el7.s390x.rpm avahi-debuginfo-0.6.31-20.el7.s390.rpm avahi-debuginfo-0.6.31-20.el7.s390x.rpm avahi-glib-0.6.31-20.el7.s390.rpm avahi-glib-0.6.31-20.el7.s390x.rpm avahi-gobject-0.6.31-20.el7.s390.rpm avahi-gobject-0.6.31-20.el7.s390x.rpm avahi-libs-0.6.31-20.el7.s390.rpm avahi-libs-0.6.31-20.el7.s390x.rpm avahi-ui-gtk3-0.6.31-20.el7.s390.rpm avahi-ui-gtk3-0.6.31-20.el7.s390x.rpm
x86_64: avahi-0.6.31-20.el7.i686.rpm avahi-0.6.31-20.el7.x86_64.rpm avahi-autoipd-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-glib-0.6.31-20.el7.i686.rpm avahi-glib-0.6.31-20.el7.x86_64.rpm avahi-gobject-0.6.31-20.el7.i686.rpm avahi-gobject-0.6.31-20.el7.x86_64.rpm avahi-libs-0.6.31-20.el7.i686.rpm avahi-libs-0.6.31-20.el7.x86_64.rpm avahi-ui-gtk3-0.6.31-20.el7.i686.rpm avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 7):
ppc64: avahi-compat-howl-0.6.31-20.el7.ppc.rpm avahi-compat-howl-0.6.31-20.el7.ppc64.rpm avahi-compat-howl-devel-0.6.31-20.el7.ppc.rpm avahi-compat-howl-devel-0.6.31-20.el7.ppc64.rpm avahi-compat-libdns_sd-0.6.31-20.el7.ppc.rpm avahi-compat-libdns_sd-0.6.31-20.el7.ppc64.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc64.rpm avahi-debuginfo-0.6.31-20.el7.ppc.rpm avahi-debuginfo-0.6.31-20.el7.ppc64.rpm avahi-devel-0.6.31-20.el7.ppc.rpm avahi-devel-0.6.31-20.el7.ppc64.rpm avahi-dnsconfd-0.6.31-20.el7.ppc64.rpm avahi-glib-devel-0.6.31-20.el7.ppc.rpm avahi-glib-devel-0.6.31-20.el7.ppc64.rpm avahi-gobject-devel-0.6.31-20.el7.ppc.rpm avahi-gobject-devel-0.6.31-20.el7.ppc64.rpm avahi-qt3-0.6.31-20.el7.ppc.rpm avahi-qt3-0.6.31-20.el7.ppc64.rpm avahi-qt3-devel-0.6.31-20.el7.ppc.rpm avahi-qt3-devel-0.6.31-20.el7.ppc64.rpm avahi-qt4-0.6.31-20.el7.ppc.rpm avahi-qt4-0.6.31-20.el7.ppc64.rpm avahi-qt4-devel-0.6.31-20.el7.ppc.rpm avahi-qt4-devel-0.6.31-20.el7.ppc64.rpm avahi-tools-0.6.31-20.el7.ppc64.rpm avahi-ui-0.6.31-20.el7.ppc.rpm avahi-ui-0.6.31-20.el7.ppc64.rpm avahi-ui-devel-0.6.31-20.el7.ppc.rpm avahi-ui-devel-0.6.31-20.el7.ppc64.rpm avahi-ui-tools-0.6.31-20.el7.ppc64.rpm
ppc64le: avahi-compat-howl-0.6.31-20.el7.ppc64le.rpm avahi-compat-howl-devel-0.6.31-20.el7.ppc64le.rpm avahi-compat-libdns_sd-0.6.31-20.el7.ppc64le.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc64le.rpm avahi-debuginfo-0.6.31-20.el7.ppc64le.rpm avahi-devel-0.6.31-20.el7.ppc64le.rpm avahi-dnsconfd-0.6.31-20.el7.ppc64le.rpm avahi-glib-devel-0.6.31-20.el7.ppc64le.rpm avahi-gobject-devel-0.6.31-20.el7.ppc64le.rpm avahi-qt3-0.6.31-20.el7.ppc64le.rpm avahi-qt3-devel-0.6.31-20.el7.ppc64le.rpm avahi-qt4-0.6.31-20.el7.ppc64le.rpm avahi-qt4-devel-0.6.31-20.el7.ppc64le.rpm avahi-tools-0.6.31-20.el7.ppc64le.rpm avahi-ui-0.6.31-20.el7.ppc64le.rpm avahi-ui-devel-0.6.31-20.el7.ppc64le.rpm avahi-ui-tools-0.6.31-20.el7.ppc64le.rpm
s390x: avahi-compat-howl-0.6.31-20.el7.s390.rpm avahi-compat-howl-0.6.31-20.el7.s390x.rpm avahi-compat-howl-devel-0.6.31-20.el7.s390.rpm avahi-compat-howl-devel-0.6.31-20.el7.s390x.rpm avahi-compat-libdns_sd-0.6.31-20.el7.s390.rpm avahi-compat-libdns_sd-0.6.31-20.el7.s390x.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.s390.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.s390x.rpm avahi-debuginfo-0.6.31-20.el7.s390.rpm avahi-debuginfo-0.6.31-20.el7.s390x.rpm avahi-devel-0.6.31-20.el7.s390.rpm avahi-devel-0.6.31-20.el7.s390x.rpm avahi-dnsconfd-0.6.31-20.el7.s390x.rpm avahi-glib-devel-0.6.31-20.el7.s390.rpm avahi-glib-devel-0.6.31-20.el7.s390x.rpm avahi-gobject-devel-0.6.31-20.el7.s390.rpm avahi-gobject-devel-0.6.31-20.el7.s390x.rpm avahi-qt3-0.6.31-20.el7.s390.rpm avahi-qt3-0.6.31-20.el7.s390x.rpm avahi-qt3-devel-0.6.31-20.el7.s390.rpm avahi-qt3-devel-0.6.31-20.el7.s390x.rpm avahi-qt4-0.6.31-20.el7.s390.rpm avahi-qt4-0.6.31-20.el7.s390x.rpm avahi-qt4-devel-0.6.31-20.el7.s390.rpm avahi-qt4-devel-0.6.31-20.el7.s390x.rpm avahi-tools-0.6.31-20.el7.s390x.rpm avahi-ui-0.6.31-20.el7.s390.rpm avahi-ui-0.6.31-20.el7.s390x.rpm avahi-ui-devel-0.6.31-20.el7.s390.rpm avahi-ui-devel-0.6.31-20.el7.s390x.rpm avahi-ui-tools-0.6.31-20.el7.s390x.rpm
x86_64: avahi-compat-howl-0.6.31-20.el7.i686.rpm avahi-compat-howl-0.6.31-20.el7.x86_64.rpm avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-devel-0.6.31-20.el7.i686.rpm avahi-devel-0.6.31-20.el7.x86_64.rpm avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm avahi-glib-devel-0.6.31-20.el7.i686.rpm avahi-glib-devel-0.6.31-20.el7.x86_64.rpm avahi-gobject-devel-0.6.31-20.el7.i686.rpm avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm avahi-qt3-0.6.31-20.el7.i686.rpm avahi-qt3-0.6.31-20.el7.x86_64.rpm avahi-qt3-devel-0.6.31-20.el7.i686.rpm avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm avahi-qt4-0.6.31-20.el7.i686.rpm avahi-qt4-0.6.31-20.el7.x86_64.rpm avahi-qt4-devel-0.6.31-20.el7.i686.rpm avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm avahi-tools-0.6.31-20.el7.x86_64.rpm avahi-ui-0.6.31-20.el7.i686.rpm avahi-ui-0.6.31-20.el7.x86_64.rpm avahi-ui-devel-0.6.31-20.el7.i686.rpm avahi-ui-devel-0.6.31-20.el7.x86_64.rpm avahi-ui-tools-0.6.31-20.el7.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 7):
Source: avahi-0.6.31-20.el7.src.rpm
x86_64: avahi-0.6.31-20.el7.i686.rpm avahi-0.6.31-20.el7.x86_64.rpm avahi-autoipd-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-glib-0.6.31-20.el7.i686.rpm avahi-glib-0.6.31-20.el7.x86_64.rpm avahi-gobject-0.6.31-20.el7.i686.rpm avahi-gobject-0.6.31-20.el7.x86_64.rpm avahi-libs-0.6.31-20.el7.i686.rpm avahi-libs-0.6.31-20.el7.x86_64.rpm avahi-ui-gtk3-0.6.31-20.el7.i686.rpm avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 7):
x86_64: avahi-compat-howl-0.6.31-20.el7.i686.rpm avahi-compat-howl-0.6.31-20.el7.x86_64.rpm avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm avahi-debuginfo-0.6.31-20.el7.i686.rpm avahi-debuginfo-0.6.31-20.el7.x86_64.rpm avahi-devel-0.6.31-20.el7.i686.rpm avahi-devel-0.6.31-20.el7.x86_64.rpm avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm avahi-glib-devel-0.6.31-20.el7.i686.rpm avahi-glib-devel-0.6.31-20.el7.x86_64.rpm avahi-gobject-devel-0.6.31-20.el7.i686.rpm avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm avahi-qt3-0.6.31-20.el7.i686.rpm avahi-qt3-0.6.31-20.el7.x86_64.rpm avahi-qt3-devel-0.6.31-20.el7.i686.rpm avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm avahi-qt4-0.6.31-20.el7.i686.rpm avahi-qt4-0.6.31-20.el7.x86_64.rpm avahi-qt4-devel-0.6.31-20.el7.i686.rpm avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm avahi-tools-0.6.31-20.el7.x86_64.rpm avahi-ui-0.6.31-20.el7.i686.rpm avahi-ui-0.6.31-20.el7.x86_64.rpm avahi-ui-devel-0.6.31-20.el7.i686.rpm avahi-ui-devel-0.6.31-20.el7.x86_64.rpm avahi-ui-tools-0.6.31-20.el7.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
Advisory ID: RHSA-2020:1176-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2020:1176
Issued Date: : 2020-03-31
CVE Names: CVE-2017-6519

Topic

An update for avahi is now available for Red Hat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impactof Low. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.


Topic


 

Relevant Releases Architectures

Red Hat Enterprise Linux Client (v. 7) - x86_64

Red Hat Enterprise Linux Client Optional (v. 7) - x86_64

Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64

Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64

Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 7) - x86_64

Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64


Bugs Fixed

1426712 - CVE-2017-6519 avahi: Multicast DNS responds to unicast queries outside of local network


Related News