Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 154322

Summary: net-dns/avahi netlink issue (CVE-2006-5461)
Product: Gentoo Security Reporter: Sune Kloppenborg Jeppesen <jaervosz>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: normal CC: swegener
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: http://avahi.org/milestone/Avahi 0.6.15
Whiteboard: B3? [glsa]
Package list:
Runtime testing required: ---

Description Sune Kloppenborg Jeppesen gentoo-dev 2006-11-07 00:32:56 UTC
Check that netlink messages actually originate from the kernel and not another process.
Comment 1 Matthias Geerdsen (RETIRED) gentoo-dev 2006-11-09 07:01:34 UTC
*** Bug 154563 has been marked as a duplicate of this bug. ***
Comment 2 Matthias Geerdsen (RETIRED) gentoo-dev 2006-11-09 07:04:18 UTC
arches, pls test avahi-0.6.15 and mark stable if possible
Comment 3 Tobias Scherbaum (RETIRED) gentoo-dev 2006-11-09 07:40:29 UTC
ppc stable, adding arches *cough*
Comment 4 Gustavo Zacarias (RETIRED) gentoo-dev 2006-11-09 10:12:47 UTC
sparc stable.
Comment 5 Christian Faulhammer (RETIRED) gentoo-dev 2006-11-10 01:20:52 UTC
Broadcasting on x86
Comment 6 Daniel Gryniewicz (RETIRED) gentoo-dev 2006-11-10 10:16:18 UTC
amd64 done.
Comment 7 René Nussbaumer (RETIRED) gentoo-dev 2006-11-13 12:12:12 UTC
stable on hppa
Comment 8 Bryan Østergaard (RETIRED) gentoo-dev 2006-11-14 09:33:44 UTC
Stable on Alpha.
Comment 9 Markus Rothe (RETIRED) gentoo-dev 2006-11-15 05:22:20 UTC
ppc64 stable. sorry for being late.
Comment 10 Matthias Geerdsen (RETIRED) gentoo-dev 2006-11-15 12:52:28 UTC
security please vote on GLSA publication
Comment 11 Sune Kloppenborg Jeppesen gentoo-dev 2006-11-15 21:24:31 UTC
I tend to vote YES.
Comment 12 Matthias Geerdsen (RETIRED) gentoo-dev 2006-11-16 03:17:26 UTC
so do I

one full vote still missing
Comment 13 Wolf Giesen (RETIRED) gentoo-dev 2006-11-16 03:38:12 UTC
Take this, then .-)
Comment 14 Sune Kloppenborg Jeppesen gentoo-dev 2006-11-20 12:59:15 UTC
GLSA 200611-13