ALAS-2024-771


Amazon Linux 2023 Security Advisory: ALAS-2024-771
Advisory Release Date: 2024-12-05 20:34 Pacific
Advisory Updated Date: 2024-12-16 13:30 Pacific
Severity: Medium

Issue Overview:

avahi: Avahi Wide-Area DNS Uses Constant Source Port (CVE-2024-52615)

avahi: Avahi Wide-Area DNS Predictable Transaction IDs (CVE-2024-52616)


Affected Packages:

avahi


Issue Correction:
Run dnf update avahi --releasever 2023.6.20241212 to update your system.

New Packages:
aarch64:
    avahi-ui-gtk3-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-compat-libdns_sd-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-debugsource-0.8-14.amzn2023.0.14.aarch64
    avahi-dnsconfd-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-ui-gtk3-0.8-14.amzn2023.0.14.aarch64
    avahi-glib-0.8-14.amzn2023.0.14.aarch64
    avahi-compat-libdns_sd-0.8-14.amzn2023.0.14.aarch64
    avahi-compat-howl-devel-0.8-14.amzn2023.0.14.aarch64
    avahi-devel-0.8-14.amzn2023.0.14.aarch64
    avahi-dnsconfd-0.8-14.amzn2023.0.14.aarch64
    avahi-compat-howl-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-0.8-14.amzn2023.0.14.aarch64
    avahi-tools-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-gobject-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-ui-devel-0.8-14.amzn2023.0.14.aarch64
    avahi-libs-0.8-14.amzn2023.0.14.aarch64
    avahi-glib-devel-0.8-14.amzn2023.0.14.aarch64
    avahi-compat-libdns_sd-devel-0.8-14.amzn2023.0.14.aarch64
    avahi-libs-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-autoipd-0.8-14.amzn2023.0.14.aarch64
    avahi-gobject-devel-0.8-14.amzn2023.0.14.aarch64
    avahi-tools-0.8-14.amzn2023.0.14.aarch64
    avahi-autoipd-debuginfo-0.8-14.amzn2023.0.14.aarch64
    avahi-compat-howl-0.8-14.amzn2023.0.14.aarch64
    avahi-gobject-0.8-14.amzn2023.0.14.aarch64
    avahi-glib-debuginfo-0.8-14.amzn2023.0.14.aarch64

src:
    avahi-0.8-14.amzn2023.0.14.src

x86_64:
    avahi-tools-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-compat-howl-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-ui-gtk3-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-libs-0.8-14.amzn2023.0.14.x86_64
    avahi-tools-0.8-14.amzn2023.0.14.x86_64
    avahi-compat-libdns_sd-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-libs-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-autoipd-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-compat-libdns_sd-devel-0.8-14.amzn2023.0.14.x86_64
    avahi-gobject-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-debugsource-0.8-14.amzn2023.0.14.x86_64
    avahi-compat-howl-devel-0.8-14.amzn2023.0.14.x86_64
    avahi-glib-0.8-14.amzn2023.0.14.x86_64
    avahi-0.8-14.amzn2023.0.14.x86_64
    avahi-glib-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-devel-0.8-14.amzn2023.0.14.x86_64
    avahi-dnsconfd-debuginfo-0.8-14.amzn2023.0.14.x86_64
    avahi-compat-howl-0.8-14.amzn2023.0.14.x86_64
    avahi-autoipd-0.8-14.amzn2023.0.14.x86_64
    avahi-glib-devel-0.8-14.amzn2023.0.14.x86_64
    avahi-ui-devel-0.8-14.amzn2023.0.14.x86_64
    avahi-compat-libdns_sd-0.8-14.amzn2023.0.14.x86_64
    avahi-dnsconfd-0.8-14.amzn2023.0.14.x86_64
    avahi-gobject-0.8-14.amzn2023.0.14.x86_64
    avahi-gobject-devel-0.8-14.amzn2023.0.14.x86_64
    avahi-ui-gtk3-0.8-14.amzn2023.0.14.x86_64