=========================================================== 
Ubuntu Security Notice USN-402-1           January 05, 2007
avahi vulnerability
CVE-2006-6870
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 5.10
Ubuntu 6.06 LTS
Ubuntu 6.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 5.10:
  avahi-daemon                             0.5.2-1ubuntu1.4

Ubuntu 6.06 LTS:
  avahi-daemon                             0.6.10-0ubuntu3.4

Ubuntu 6.10:
  avahi-daemon                             0.6.13-2ubuntu2.4

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

A flaw was discovered in Avahi's handling of compressed DNS packets.  If 
a specially crafted reply were received over the network, the Avahi 
daemon would go into an infinite loop, causing a denial of service.


Updated packages for Ubuntu 5.10:

  Source archives:

          Size/MD5:     6108 a8e954dd822c3cb97ea1ec2eac3d6150
          Size/MD5:     1151 dceb611a55038fd8a1891d7a9da79431
          Size/MD5:   651504 dc7ce24ffaab251a2002bf1dfdbe256d

  Architecture independent packages:

          Size/MD5:    15870 e13c47f5e3de3f7674e6b80e121f11e9
          Size/MD5:    20844 bd071a7298eb429471ce928446a1f245
          Size/MD5:     9056 01a89e48af5fe5a49ecf73b0f1a325a9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:    49136 a5f55be2d74b7bd69d4658287cc8d37d
          Size/MD5:    15376 da8e944c98a0b0ba7ce7a999f30dd669
          Size/MD5:    28064 583c292d669de06c350377a7efa77d6e
          Size/MD5:    23182 f32fc227b5fcf96036978666adaf793a
          Size/MD5:    31618 8142253dd1d69eb91a06f3fd5ead97e7
          Size/MD5:    20636 0f333ed82b0b85333cd81980021317f7
          Size/MD5:   104534 deb56ff732b2cff9df646150f2706bd7
          Size/MD5:    75476 d9a311aa2adb74b3496f1a5d220b3ddb
          Size/MD5:    10130 e583bd7f6e7f70c7a4280a621ad33e00
          Size/MD5:     8966 641722e90277c661e628f9dcde275273
          Size/MD5:    11516 c772c8ef5e8190589316f0d720834976
          Size/MD5:    11798 0eba57c6e1c855014626b39feea3db74
          Size/MD5:     9370 b400453620d5de00af9e5608fa78cf6b
          Size/MD5:     9764 2000da3f76b64de7c6aee58c7fe9dfed

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:    45092 1e9d2c6d9961d9e3dea531d185e10662
          Size/MD5:    14422 ef3acd3772b1660bdb5ad3f30f245607
          Size/MD5:    24688 9fe90a2afcbea0e2512d0335848e4d08
          Size/MD5:    19940 4ce8b6e4dc6e3954dc03785d675e461d
          Size/MD5:    28490 e89c7298ba1c6e8caad3a0de12ec9d94
          Size/MD5:    18870 c4a99ae56ffa0bcc7b6f19f90e761009
          Size/MD5:    88668 d3819d45a5dd393ccde57e3e76c04493
          Size/MD5:    65882 a3c8607b2e76b13ed9a97a482488b062
          Size/MD5:     9244 ae8d6c53f493b3d71176fc240d21b684
          Size/MD5:     8582 7bfe905f40dcf192f28e294cac3abe05
          Size/MD5:    11216 21a9c7665ed01321581f2e4fce59a674
          Size/MD5:    11010 db774bb7609a4cb87246a6ec07dd48fa
          Size/MD5:     9130 b2b0bf2212f5ccfe8a1afe483e5da18d
          Size/MD5:     9142 768692b3b6193e172f6bd8f9779a4efd

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:    47850 5fe87ff5f0db9880625c9fa85b557896
          Size/MD5:    16434 d1be908588d0c45fc15f80ac64030dcc
          Size/MD5:    28710 0153fb33a2a55ffe560aa491bd122b54
          Size/MD5:    23076 81aa4bc474486500174cd73c4f378deb
          Size/MD5:    31936 6e84cd0ed27c49c7f1ec17c3f395b9ed
          Size/MD5:    22658 92a2368ea5ea3da9f2d50d7f1fd62cbe
          Size/MD5:   109446 217ce063cc63264f63ec42b2020484a4
          Size/MD5:    70184 fcce2e990620edb2ec286a117f9c39c6
          Size/MD5:    10282 dcf9d70429a505a28a167551cf76ad04
          Size/MD5:    10944 712f8039d057341e7d3958fec9185f13
          Size/MD5:    13166 7644ea811e9f92d10815fd4b93bba978
          Size/MD5:    12042 d9c15fbc4872e90dd32568759987f433
          Size/MD5:    11032 b2624a3eddcfe4928e37964e09ab0fcd
          Size/MD5:     9840 8a414b2e3fa78bc6df7c2ef9c8a96d89

Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    13099 8c901e3708d03fce479217a404902fe7
          Size/MD5:     1427 cf9a8e0e285c184b18f818641bdca9d7
          Size/MD5:   879819 cfb9e05c138dff4c430a35eee6229e8a

  Architecture independent packages:

          Size/MD5:    20488 dbac4764faf7a0c251e6a552f58468f0
          Size/MD5:    39810 04f75c4d45a5e3f3ecfc73eab68fd00b
          Size/MD5:    40188 1788686b51474a3740bab84d108e32d1
          Size/MD5:    21264 ee2342af2691625fde9207d1ef33fa1b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:    73974 e440f019d36e3fdce54ca6164093e50d
          Size/MD5:    27152 2b88b8ea45fa1b7a79014c4b412cc397
          Size/MD5:    36376 93376765aef76f19dfdfebb325a4c2eb
          Size/MD5:    49310 9367cf96c92088cb72560c0d7b61c26d
          Size/MD5:    41760 0945760b37b2ec4f3567a13907a9d27e
          Size/MD5:    17872 86d52321d23b0f1105dc21c18903e498
          Size/MD5:    54562 bce4ca78fb2b5ab04d9338b598b0eecc
          Size/MD5:    35862 3b74aec935152c453cca9fd415e8c745
          Size/MD5:    50224 a3dd0fe67a720f9c4333ed7af3c24706
          Size/MD5:    35226 2dbd5e3baf3583aeddd4ef79700e1751
          Size/MD5:    46944 c1b22f0d14ad72331efc897bd1c6ad3d
          Size/MD5:    29200 c0362915bee769434355c9f8936ab525
          Size/MD5:   141636 3b786fa3a7caa48edad2d316447ab46f
          Size/MD5:   105436 574c7b8835bb38b43e74107a18c068cd
          Size/MD5:    21988 8cf65087efd32bd097205326455b7e6f
          Size/MD5:    20528 8a4f0c8aa4f1cc4c926fb991325049da
          Size/MD5:    23056 f08c367ab242d7739fddf11bc2ddbee2
          Size/MD5:    23178 8eeb22ee701b6321a0539d6e67d1ea69

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:    68340 c5a9e0b36ad01cd93b73524d64417147
          Size/MD5:    26250 056993bb62354f3bd03b76bd86611144
          Size/MD5:    33672 c59249c3fc19a2a5622029a848356657
          Size/MD5:    44200 3ca6c4da8a193c03c93b43a7eb606855
          Size/MD5:    37802 92935363b2283530036c52171958ff82
          Size/MD5:    17878 9f8c3545db040c20a36485d1ece995ce
          Size/MD5:    49968 9303ea75a60bad447e086323b967aa2c
          Size/MD5:    32952 541a19c431be2a2e150298fb8c3f508f
          Size/MD5:    45422 287654b72f2b67fe80342cb0280f6185
          Size/MD5:    31878 209e71069376c306366cec7d8ee069fb
          Size/MD5:    44172 f26d60ba758bd3c48220a77995652721
          Size/MD5:    26750 76565cc50c6666e13be5bfeda703bbe4
          Size/MD5:   120990 630b7f9ed7624d595cab81afa183b5a1
          Size/MD5:    93050 4f68b59baeac37f427b40e1e62b42517
          Size/MD5:    20908 14a2df69d19e7af651914a42b1dc0d59
          Size/MD5:    20094 ebc396c6ab1bd4249cd213e68dd6b368
          Size/MD5:    22746 2512405e720de9dc0636ddbfd3e61f06
          Size/MD5:    22432 af65eddaae93927964d76c1f0806b5d7

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:    71818 d783d70a35e1e78e31f74c408156c6bf
          Size/MD5:    28240 019f3f3d37ed77066bd3d2e63e1f797e
          Size/MD5:    37906 bfe33c0a9a6f7355e2d2061e80c54c0e
          Size/MD5:    51174 476a8ef32a50d5d04c4751b822258e2a
          Size/MD5:    41536 5c872fea7885f23258f3283f24c9a67d
          Size/MD5:    17910 e215456083688a7822dbd7e382ec7d53
          Size/MD5:    54930 38e3dc4011276f3e2941fe45303ba38f
          Size/MD5:    37272 8668a1e03453b527c569428d5e32527d
          Size/MD5:    50380 409ac1c883998f2979291941aed86ebb
          Size/MD5:    35750 fdb616a6495923c3422ebb376e586323
          Size/MD5:    47634 784d8382e8f85376ad9b6d8fb5a7f9d3
          Size/MD5:    29342 98f02ebb93b7fcdaf1c10386f40bd0b8
          Size/MD5:   147510 856bc3cea308e1952a88b4c42600df89
          Size/MD5:    98544 8e12f28f329db431b8a42b9ffc479838
          Size/MD5:    22096 3a56351a9ac138b17d7a202e2df3db1f
          Size/MD5:    22566 6594219c9302e3f036f90a28fe020243
          Size/MD5:    24524 8ecefdb1cae36daa9b4e92ddaf148447
          Size/MD5:    23438 ac82c547e1d4750b35df35e9b49c666d

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:    68846 d592941ec409719fc32f97e4e3a71298
          Size/MD5:    26438 2b40584351e28a82ba79777854f0723d
          Size/MD5:    33804 c1a9f6434146d8fce05b2a2741663305
          Size/MD5:    47454 0bcfa5e9789f762099ffabcb80abb367
          Size/MD5:    38488 9e2c1235c5202cc0e4d02a4b03b235dd
          Size/MD5:    18012 7637524539ca7eea3a73fd969f1b89da
          Size/MD5:    52202 a8b2176aafd70a366dd59ae24fe0f120
          Size/MD5:    34166 07c54435eb15e665a9d2e231e72da2d0
          Size/MD5:    48252 b503cd9fad9807c0131a8bb236a10195
          Size/MD5:    33782 b2aca86977c373b7d0dbd10d34dfb749
          Size/MD5:    45636 379f552458b45f5d25516586b62dd54e
          Size/MD5:    27052 9e01f84fd6a001cbee1b6b3b1de01755
          Size/MD5:   134468 950f430c3355cb761ac295103043f8c1
          Size/MD5:    96342 e0c09f9167cf5d2dbe1904094b94d355
          Size/MD5:    21594 b0c88b0ce13021d3842cf0c4daadef9b
          Size/MD5:    20406 a49bef1e07b45dd44a137ca976509fb5
          Size/MD5:    22430 587fdeb893036fbee0c309bfe69b58ee
          Size/MD5:    22442 6264f17ca01821f57cd058c0ed4d6b1b

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:    14278 3908a6106cccdf689bcf6646efdab94f
          Size/MD5:     1441 1b1734930f5df03526f86c52cda657d7
          Size/MD5:   895380 d1000689979105cc95b9ca102284aae4

  Architecture independent packages:

          Size/MD5:    22012 414cf9ec9f9a925f1dae38caf8ae0e3b
          Size/MD5:    22740 6484122d90c0b971670b3b832955e2f4

  amd64 architecture (Athlon64, Opteron, EM64T Xeon)

          Size/MD5:    75652 f4871f53f937cd989948b521c507e418
          Size/MD5:    28988 954e3ec208492c32d1a9e3bf4831f565
          Size/MD5:    41526 93ff2ee65bc3e9e16b86ea70cb2e42e9
          Size/MD5:    51036 a38c3b2aeee6cfc07e83c05e01b354fa
          Size/MD5:    43600 ae2f7972fd60cb4368217f8ceb4eba69
          Size/MD5:    19842 f295187b0f7290eb22eda25a4a52488b
          Size/MD5:    56394 d672e61a06eac181d927cef1ed6ad46a
          Size/MD5:    37898 816504bfc2e5718ead43e5d82d26f68a
          Size/MD5:    51770 28c9e30cc67c4ccbfed1536db9cad5cf
          Size/MD5:    37178 1a969c1e1a5a650e7b3763371c9d7e9e
          Size/MD5:    51208 43ec825c030535782a849a5cdff1b22b
          Size/MD5:    32120 f251e2eafa750c30f96142b9805898e8
          Size/MD5:   143750 caa2043c39f77b89aafc947e47195042
          Size/MD5:   107584 5b68923753f28d3bc4856b09b1f95b88
          Size/MD5:    23870 1e52232f37e60cca59b5c564860d5ee1
          Size/MD5:    22442 4ee3d8a15e77bc542d9ca3f4b6ac7635
          Size/MD5:    24732 924a4bee408f07b904b2a050b86d8785
          Size/MD5:    24754 e8b2e914015134ce27a493f4605d4d37
          Size/MD5:    22682 8ee891be339fb96531c89230b2e2c84e
          Size/MD5:    22754 74a0843256b9f32befd3a6c54d86ed18

  i386 architecture (x86 compatible Intel/AMD)

          Size/MD5:    71510 320f9aedcc6082161dab02599f97b2d7
          Size/MD5:    28300 59a77ee17e68d15410f52e2cf9f48d43
          Size/MD5:    39138 c7e5c70e9826fd7aad99f9e3d40b8cd3
          Size/MD5:    46884 a9c6347731a8a93d8338fdb3cbc02eff
          Size/MD5:    40640 04b0d57b8f814ca0bc21f70109fc845d
          Size/MD5:    19844 efce5e952b3721c54d3a05bce276250f
          Size/MD5:    52792 4c6255b509ef9d2294108bd9162fb69c
          Size/MD5:    35990 86acd267bcf2c23909080621fbf22d0d
          Size/MD5:    47686 7154144896f0398558f44b062660b18d
          Size/MD5:    34426 a7223acafe8353c7ab72ff7b071a1a5f
          Size/MD5:    48768 36eef81702c42c5236fbf810fb8cc5b1
          Size/MD5:    30004 6ba2a437496b8f1c93163c6874a8af7d
          Size/MD5:   126898 34442e437e1e951d09bba885e2e4bc6b
          Size/MD5:    98916 c258f95cd5b1bd9771a2074ad0ea3b39
          Size/MD5:    23066 9fb9798fda410d3208f5f4e623f65a95
          Size/MD5:    22130 082bb06ce5469848211c0be6a9a5da2c
          Size/MD5:    24678 0ae7df8be874d9aa76b0bb6032a243cd
          Size/MD5:    24238 f0a39d4710b87792b5e709bdd811437a
          Size/MD5:    22516 9da9e6a0b2b1318c9d1b5a6b674e4a6a
          Size/MD5:    22412 e6a6b625a5fe4cfc6c50e53bbb4cfdbb

  powerpc architecture (Apple Macintosh G3/G4/G5)

          Size/MD5:    73734 280a3edd1f0c0c61b0f70a54ce02c469
          Size/MD5:    30178 ef4603653bf7b356ce6d75fbd2511c89
          Size/MD5:    44236 1209ab76e5fc95f6fca1f1827e78208e
          Size/MD5:    52934 3ce0c0d7ae3f82fc689d886849768705
          Size/MD5:    43402 b1e5bad000287c4f785a633848bf6b15
          Size/MD5:    19866 2bf3674ae135e47e3e5a2b0582860003
          Size/MD5:    57108 7472927ee66d68304464f8b8f0a9094b
          Size/MD5:    39780 02a18a6111d1c8d4d53c7306eb1529ca
          Size/MD5:    52088 841b7e718ac511fcf6de714c2a2d1ab2
          Size/MD5:    37684 720e984a64ad0d0ba3ed4800ce8bed45
          Size/MD5:    51862 78b2fbd3b3f49a8ed12faa050e01dd3d
          Size/MD5:    31980 98c1a2c768a11391c1c64c2d46efedcf
          Size/MD5:   150702 7170f4bc02bb144fe0808bb98b1448ab
          Size/MD5:   101560 5e70d161b56ef362aa8f6c82b5d72395
          Size/MD5:    23990 7b3ef737552ea6bcc66ce343d56a6553
          Size/MD5:    24366 67ad9925ecd0718cc53b7ef01b1d021d
          Size/MD5:    26356 fb265a2d31383ff99062add2c66c2c67
          Size/MD5:    25074 bc570f3046a4f279ff8ab05237cdd9a2
          Size/MD5:    24294 68030cb173addfcd177216e806e018b9
          Size/MD5:    22912 01fa75270dac49e8fe181b09a181809b

  sparc architecture (Sun SPARC/UltraSPARC)

          Size/MD5:    70890 228ab3a94fa3a84b70df769580d5d8b5
          Size/MD5:    28260 86db1884371016e36768a91784822ffe
          Size/MD5:    38722 fb2fb9f05deb9602e49effad86099c48
          Size/MD5:    49414 9f91c7c61266637dab0de56289cc36f6
          Size/MD5:    40436 68d86ebcf3c76a90afaee58d309a517e
          Size/MD5:    19926 bc6cb1d80653a2cb260ccd72f3b6a523
          Size/MD5:    54290 8d7cd66ea628c2a50a43ea2f0c1cd04f
          Size/MD5:    36436 826c81b3e5cdc7fad855fca00cc5454b
          Size/MD5:    50026 c6ce22e5307a8fe2ed30d044daf16765
          Size/MD5:    35554 30618ca9cf339e04b3e10c0f8f82957c
          Size/MD5:    49854 d00aaca86c6c8727c1f5b8f8d9ea9fbb
          Size/MD5:    29708 7b22740ba0a2d4d99a064a392ca6c45b
          Size/MD5:   136782 20f116a8e16c85bd7874399d8efb8004
          Size/MD5:    98418 3f4b4cbe8325ca5cf8e8212c166fc783
          Size/MD5:    23442 de65e7728c524cab19e3fa36be06eed3
          Size/MD5:    22180 2d40551cbbae1fff8252ed368f18f16a
          Size/MD5:    24128 90627257ad0ddbd60907f954c0475caa
          Size/MD5:    24082 062ffc9a62ce5c0e0153ab004462a2c2
          Size/MD5:    22186 0575a6c320d9c8e7cc6297f3d3a1ed91
          Size/MD5:    22240 8776d2939ba9c039308fa23ca01fec96


Ubuntu: Avahi vulnerability

January 5, 2007
A flaw was discovered in Avahi's handling of compressed DNS packets

Summary

Update Instructions

References

Severity
Ubuntu Security Notice USN-402-1 January 05, 2007

Package Information

Related News