]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
avahi: fix CVE-2024-52615
authorZhang Peng <peng.zhang1.cn@windriver.com>
Thu, 31 Jul 2025 06:06:42 +0000 (14:06 +0800)
committerSteve Sakoman <steve@sakoman.com>
Thu, 31 Jul 2025 16:30:41 +0000 (09:30 -0700)
commit455f3a936874e62b57d50cc1b84dc816e35312af
tree78cbe1943001e5ef549221ec4c9248b5da98318e
parent8bea495b4945e24b43398f40d634d7fdb73e981a
avahi: fix CVE-2024-52615

CVE-2024-52615:
A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area
DNS queries. This issue simplifies attacks where malicious DNS responses are injected.

Reference:
[https://nvd.nist.gov/vuln/detail/CVE-2024-52615]
[https://github.com/avahi/avahi/security/advisories/GHSA-x6vp-f33h-h32g]

Upstream patches:
[https://github.com/avahi/avahi/commit/4e2e1ea0908d7e6ad7f38ae04fdcdf2411f8b942]

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-connectivity/avahi/avahi_0.8.bb
meta/recipes-connectivity/avahi/files/CVE-2024-52615.patch [new file with mode: 0644]