Security issue mentioned in the DoS flaw reported by Hugo Dias. Crafted mDNS packet with source port 0 can cause avahi-daemon to abort() due to failed assertion assert(port > 0); in originates_from_local_legacy_unicast_socket() function in avahi-core/server.c. Upstream commit: http://git.0pointer.de/?p=avahi.git;a=commitdiff;h=3093047f1aa36bed8a37fa79004bf0ee287929f4 Reproducible: Always
I just commited net-dns/avahi-0.6.24 to the tree.
*** Bug 251315 has been marked as a duplicate of this bug. ***
Is i ok for stabling?
Arches, please test and mark stable: =net-dns/avahi-0.6.24 Target keywords : "alpha amd64 arm hppa ia64 ppc ppc64 s390 sh sparc x86"
amd64/x86 stable
Stable for HPPA.
ppc stable
ppc64 done. the hooks for monodoc are in these avahi ebuilds now so we should probably get a depend on monodoc and subsequent mono stablization no?
(In reply to comment #8) > ppc64 done. the hooks for monodoc are in these avahi ebuilds now so we should > probably get a depend on monodoc and subsequent mono stablization no? > bleh, tree was not totally synced...disregard previous comment
Stable on alpha.
ia64/sparc stable
Ready for vote, I vote YES.
Yes, too. Request filed.
GLSA 200901-11