MGASA-2024-0016

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2024-0016.html
Import Source
https://advisories.mageia.org/MGASA-2024-0016.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2024-0016
Upstream
Published
2024-01-25T11:21:08Z
Modified
2026-04-16T00:10:08Z
Summary
Updated avahi packages fix security vulnerabilities
Details

The updated packages fix security vulnerabilities: A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. (CVE-2023-38469) A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. (CVE-2023-38470) A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. (CVE-2023-38471) A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. (CVE-2023-38472) A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. (CVE-2023-38473)

References
Credits

Affected packages

Mageia:9 / avahi

Package

Name
avahi
Purl
pkg:rpm/mageia/avahi?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.8-10.1.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2024-0016.json"