The Mandriva Security Team published a new security update for Mandriva Linux. Here the announcement:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2007:185
http://www.mandriva.com/security/
_______________________________________________________________________

Package : avahi
Date : September 17, 2007
Affected: 2007.0, 2007.1
_______________________________________________________________________

Problem Description:

The Avahi daemon in 0.6.20 and previous allows attackers to cause a
denial of service via empty TXT data over D-Bus, which triggers an
assert error.

Updated packages have been patched to prevent this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3372
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2007.0:
9b42ab7d33f6f3645ffb1d8c10f2b7be 2007.0/i586/avahi-0.6.13-4.3mdv2007.0.i586.rpm
3dd8f44477109b6be1937d027c04334f 2007.0/i586/avahi-dnsconfd-0.6.13-4.3mdv2007.0.i586.rpm
61d1ad9658ee265ace14d11ec319feb3 2007.0/i586/avahi-python-0.6.13-4.3mdv2007.0.i586.rpm
4b2442311c56146a8769d271705835a3 2007.0/i586/avahi-sharp-0.6.13-4.3mdv2007.0.i586.rpm
6c65b69658bf5fba762baceb8d54c618 2007.0/i586/avahi-x11-0.6.13-4.3mdv2007.0.i586.rpm
8974d63f0c51d711c64476f23de79091 2007.0/i586/libavahi-client3-0.6.13-4.3mdv2007.0.i586.rpm
653beb7c63bd95a2ff04420ce45cfb3c 2007.0/i586/libavahi-client3-devel-0.6.13-4.3mdv2007.0.i586.rpm
d57e3395370d334c3d0389b5d27f69ee 2007.0/i586/libavahi-common3-0.6.13-4.3mdv2007.0.i586.rpm
9033a6df7041a041c994cb69615ba62f 2007.0/i586/libavahi-common3-devel-0.6.13-4.3mdv2007.0.i586.rpm
bd4189a93e747941a4b65fb93f7cde38 2007.0/i586/libavahi-compat-howl0-0.6.13-4.3mdv2007.0.i586.rpm
884f7d0baf1af89fe6e3975975555d41 2007.0/i586/libavahi-compat-howl0-devel-0.6.13-4.3mdv2007.0.i586.rpm
1f50ca143a4fbbf6cada79fc4f736c29 2007.0/i586/libavahi-compat-libdns_sd1-0.6.13-4.3mdv2007.0.i586.rpm
b4fbae18da3a0823c073a71b917a36fe 2007.0/i586/libavahi-compat-libdns_sd1-devel-0.6.13-4.3mdv2007.0.i586.rpm
7331d7cde7c5184a0da289639182df6f 2007.0/i586/libavahi-core4-0.6.13-4.3mdv2007.0.i586.rpm
3a5e26980894b846ebf960d5f50d21cc 2007.0/i586/libavahi-core4-devel-0.6.13-4.3mdv2007.0.i586.rpm
b9c5809919acd3fd33c148dfa3c91959 2007.0/i586/libavahi-glib1-0.6.13-4.3mdv2007.0.i586.rpm
d42c43448e010d0b75f561d276402dff 2007.0/i586/libavahi-glib1-devel-0.6.13-4.3mdv2007.0.i586.rpm
c7f30225b0153e555466b6ee37a857d3 2007.0/i586/libavahi-qt3_1-0.6.13-4.3mdv2007.0.i586.rpm
abe726ef80d631e068eef0b73eb1cd76 2007.0/i586/libavahi-qt3_1-devel-0.6.13-4.3mdv2007.0.i586.rpm
263c40aeddc7aa56284dcccd94061b83 2007.0/i586/libavahi-qt4_1-0.6.13-4.3mdv2007.0.i586.rpm
6165066dd59ecd5e965b8cc9a6794b3e 2007.0/i586/libavahi-qt4_1-devel-0.6.13-4.3mdv2007.0.i586.rpm
a078edca8e651bd288b99eb071c477a4 2007.0/SRPMS/avahi-0.6.13-4.3mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
32bdcbf34c11d3b568660f1269f7739f 2007.0/x86_64/avahi-0.6.13-4.3mdv2007.0.x86_64.rpm
119731a972772a866be55a8a3794d6e8 2007.0/x86_64/avahi-dnsconfd-0.6.13-4.3mdv2007.0.x86_64.rpm
54bb90936d710ffe021eaa327bf906cc 2007.0/x86_64/avahi-python-0.6.13-4.3mdv2007.0.x86_64.rpm
c627d10f177aec68260e96c2fbebf302 2007.0/x86_64/avahi-sharp-0.6.13-4.3mdv2007.0.x86_64.rpm
e03e889615e72e05fa159ca33ce8652f 2007.0/x86_64/avahi-x11-0.6.13-4.3mdv2007.0.x86_64.rpm
0818f91e8d83fc4bffd753218b14b7d8 2007.0/x86_64/lib64avahi-client3-0.6.13-4.3mdv2007.0.x86_64.rpm
f63e399dee05af7c36fd477a2b1965c5 2007.0/x86_64/lib64avahi-client3-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
96e1032970e9a5df235c9457d69f6363 2007.0/x86_64/lib64avahi-common3-0.6.13-4.3mdv2007.0.x86_64.rpm
027aecd334aadac0c7789b6e70ef96c6 2007.0/x86_64/lib64avahi-common3-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
c09888641a61a677cbfad98fe185ce5a 2007.0/x86_64/lib64avahi-compat-howl0-0.6.13-4.3mdv2007.0.x86_64.rpm
b202d3105c17842df5280e220e09eceb 2007.0/x86_64/lib64avahi-compat-howl0-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
06b9daaa3516cfd3a11c852a9704a3b2 2007.0/x86_64/lib64avahi-compat-libdns_sd1-0.6.13-4.3mdv2007.0.x86_64.rpm
0f21e479c3adf79e5f2b85317e0543f1 2007.0/x86_64/lib64avahi-compat-libdns_sd1-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
aa9db148a186ca2fcd1d248b555962b2 2007.0/x86_64/lib64avahi-core4-0.6.13-4.3mdv2007.0.x86_64.rpm
3e0b6921ea49c48f7ce07a661cab7547 2007.0/x86_64/lib64avahi-core4-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
482416289f4fa44c9802b496b9d32b43 2007.0/x86_64/lib64avahi-glib1-0.6.13-4.3mdv2007.0.x86_64.rpm
ee224788f649a439cc7da2b8de29944e 2007.0/x86_64/lib64avahi-glib1-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
53c2ccc7e6c378ee9c79847b17038c40 2007.0/x86_64/lib64avahi-qt3_1-0.6.13-4.3mdv2007.0.x86_64.rpm
21d19035cd5e813004f3cc5cff646087 2007.0/x86_64/lib64avahi-qt3_1-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
2519453410006dc4dcd63b3156260dad 2007.0/x86_64/lib64avahi-qt4_1-0.6.13-4.3mdv2007.0.x86_64.rpm
476cf9a62a1fa5aeb5337c87218fca4c 2007.0/x86_64/lib64avahi-qt4_1-devel-0.6.13-4.3mdv2007.0.x86_64.rpm
a078edca8e651bd288b99eb071c477a4 2007.0/SRPMS/avahi-0.6.13-4.3mdv2007.0.src.rpm

Mandriva Linux 2007.1:
c594af2bfa6689a7c1b7f2484a8df77c 2007.1/i586/avahi-0.6.17-1.1mdv2007.1.i586.rpm
e64c0e737ff84c31a8388f3598ece7ad 2007.1/i586/avahi-dnsconfd-0.6.17-1.1mdv2007.1.i586.rpm
35a3d319e3f965f9455348a429cb2a1d 2007.1/i586/avahi-python-0.6.17-1.1mdv2007.1.i586.rpm
7eef255b2b10b533bf0e1c5533231dc7 2007.1/i586/avahi-sharp-0.6.17-1.1mdv2007.1.i586.rpm
e9dde153e07ccb5a787bd09e35504569 2007.1/i586/avahi-sharp-doc-0.6.17-1.1mdv2007.1.i586.rpm
26c0756132d203f7ed537a8dc08b53f7 2007.1/i586/avahi-x11-0.6.17-1.1mdv2007.1.i586.rpm
ad9509ae2da5a5b25a803ba4968e55d6 2007.1/i586/libavahi-client3-0.6.17-1.1mdv2007.1.i586.rpm
afaf9c8cce51732b7d720c6df2ae27ca 2007.1/i586/libavahi-client3-devel-0.6.17-1.1mdv2007.1.i586.rpm
b632147727b3de90fcbb0f6b3e559000 2007.1/i586/libavahi-common3-0.6.17-1.1mdv2007.1.i586.rpm
adc5e726a7b336e1efde4af3cfb39b0c 2007.1/i586/libavahi-common3-devel-0.6.17-1.1mdv2007.1.i586.rpm
e88e78d56ea604fa2d9c532bfe1f3b70 2007.1/i586/libavahi-compat-howl0-0.6.17-1.1mdv2007.1.i586.rpm
7c03e4baeb6428241525f26019b882b1 2007.1/i586/libavahi-compat-howl0-devel-0.6.17-1.1mdv2007.1.i586.rpm
7ee801d00907ce22e2c8a046850383e4 2007.1/i586/libavahi-compat-libdns_sd1-0.6.17-1.1mdv2007.1.i586.rpm
6ff64a5037ad4186f6481e8caf0bd59a 2007.1/i586/libavahi-compat-libdns_sd1-devel-0.6.17-1.1mdv2007.1.i586.rpm
52562b6216a33f8da91cc4516c1f3072 2007.1/i586/libavahi-core5-0.6.17-1.1mdv2007.1.i586.rpm
f7ecaf7c04e3acdb9dac3acd8098b2fb 2007.1/i586/libavahi-core5-devel-0.6.17-1.1mdv2007.1.i586.rpm
00acc02c435ae6b59649f86b0e99d440 2007.1/i586/libavahi-glib1-0.6.17-1.1mdv2007.1.i586.rpm
c44fb1ae2de3123f9dcca4a0b7eb2374 2007.1/i586/libavahi-glib1-devel-0.6.17-1.1mdv2007.1.i586.rpm
b42d69062ad05624b179a02b5efec117 2007.1/i586/libavahi-qt3_1-0.6.17-1.1mdv2007.1.i586.rpm
c2044c5d7cde9e34dacaa18edd9841cb 2007.1/i586/libavahi-qt3_1-devel-0.6.17-1.1mdv2007.1.i586.rpm
74af7ff7ef86b8f9500d1a743dc562b2 2007.1/i586/libavahi-qt4_1-0.6.17-1.1mdv2007.1.i586.rpm
a1aa664366725cbe9fa5fe040556c1fa 2007.1/i586/libavahi-qt4_1-devel-0.6.17-1.1mdv2007.1.i586.rpm
7c8767bcc749046d6425d737a56b8222 2007.1/SRPMS/avahi-0.6.17-1.1mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
f094a05a552d9ba13dec063d56f1e22c 2007.1/x86_64/avahi-0.6.17-1.1mdv2007.1.x86_64.rpm
39d9b751a7503db9239128d43bd5ad3f 2007.1/x86_64/avahi-dnsconfd-0.6.17-1.1mdv2007.1.x86_64.rpm
5fb282c47d55bbbf2077a63023e0fd1a 2007.1/x86_64/avahi-python-0.6.17-1.1mdv2007.1.x86_64.rpm
9b4dedd7a85d3b3071ac1e8cef4f7525 2007.1/x86_64/avahi-sharp-0.6.17-1.1mdv2007.1.x86_64.rpm
a8f7fac1cde5ae63502903bc8567884f 2007.1/x86_64/avahi-sharp-doc-0.6.17-1.1mdv2007.1.x86_64.rpm
ee64d6cccc9b9d77c0bb1fce91ab4a7d 2007.1/x86_64/avahi-x11-0.6.17-1.1mdv2007.1.x86_64.rpm
ffcc772b531d6154a44981dfb64f523d 2007.1/x86_64/lib64avahi-client3-0.6.17-1.1mdv2007.1.x86_64.rpm
55c345072802eee53ab869aa244ee0cf 2007.1/x86_64/lib64avahi-client3-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
757596964e809446b3609d8171e91073 2007.1/x86_64/lib64avahi-common3-0.6.17-1.1mdv2007.1.x86_64.rpm
2cb6cf729bb97d1c991a4e299e2187f7 2007.1/x86_64/lib64avahi-common3-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
7de3b12c7f083295d77b44bcf519f771 2007.1/x86_64/lib64avahi-compat-howl0-0.6.17-1.1mdv2007.1.x86_64.rpm
2ed4cc31f953e4af55a01caef59fb09f 2007.1/x86_64/lib64avahi-compat-howl0-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
064f583041d5f9c47c1d09f0cead95ff 2007.1/x86_64/lib64avahi-compat-libdns_sd1-0.6.17-1.1mdv2007.1.x86_64.rpm
724f6efdff583868004d68574a69d6b2 2007.1/x86_64/lib64avahi-compat-libdns_sd1-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
7598dabff5d5c0cc2e72f6985e4f53d5 2007.1/x86_64/lib64avahi-core5-0.6.17-1.1mdv2007.1.x86_64.rpm
957b59e1e063a45e5c7e3f4b149d8574 2007.1/x86_64/lib64avahi-core5-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
00895af428b5fc5d476025b29d823802 2007.1/x86_64/lib64avahi-glib1-0.6.17-1.1mdv2007.1.x86_64.rpm
00049709452921a8f20b12b6818d194a 2007.1/x86_64/lib64avahi-glib1-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
1a7b663e7a2e947a36ae558aa186b63f 2007.1/x86_64/lib64avahi-qt3_1-0.6.17-1.1mdv2007.1.x86_64.rpm
fd3516bd0edd363df92eeb2227a56f41 2007.1/x86_64/lib64avahi-qt3_1-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
c6fe42aa0f2399074a71f59f6dc6f3a2 2007.1/x86_64/lib64avahi-qt4_1-0.6.17-1.1mdv2007.1.x86_64.rpm
ad45ac4f9c46187d8c7281b3b6b70959 2007.1/x86_64/lib64avahi-qt4_1-devel-0.6.17-1.1mdv2007.1.x86_64.rpm
7c8767bcc749046d6425d737a56b8222 2007.1/SRPMS/avahi-0.6.17-1.1mdv2007.1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFG7tWbmqjQ0CJFipgRAiP1AKCZjplO37tiAECOUJQJKD3m1egJLACeJG2s
NoL5D2xWeLZr3UHltnNyN8A=
=j+tP
-----END PGP SIGNATURE-----