-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2020.1186
                           avahi security update
                               2 April 2020

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           avahi
Publisher:         Red Hat
Operating System:  Red Hat Enterprise Linux Server 7
                   Red Hat Enterprise Linux WS/Desktop 7
Impact/Access:     Denial of Service        -- Remote/Unauthenticated
                   Access Confidential Data -- Remote/Unauthenticated
Resolution:        Patch/Upgrade
CVE Names:         CVE-2017-6519  

Reference:         ESB-2019.0297

Original Bulletin: 
   https://access.redhat.com/errata/RHSA-2020:1176

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Low: avahi security update
Advisory ID:       RHSA-2020:1176-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2020:1176
Issue date:        2020-03-31
CVE Names:         CVE-2017-6519 
=====================================================================

1. Summary:

An update for avahi is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact
of Low. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64

3. Description:

Avahi is an implementation of the DNS Service Discovery and Multicast DNS
specifications for Zero Configuration Networking. It facilitates service
discovery on a local network. Avahi and Avahi-aware applications allow you
to plug your computer into a network and, with no configuration, view other
people to chat with, view printers to print with, and find shared files on
other computers.

Security Fix(es):

* avahi: Multicast DNS responds to unicast queries outside of local network
(CVE-2017-6519)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.8 Release Notes linked from the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the update, avahi-daemon will be restarted automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

1426712 - CVE-2017-6519 avahi: Multicast DNS responds to unicast queries outside of local network

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Server (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

ppc64:
avahi-0.6.31-20.el7.ppc.rpm
avahi-0.6.31-20.el7.ppc64.rpm
avahi-autoipd-0.6.31-20.el7.ppc64.rpm
avahi-debuginfo-0.6.31-20.el7.ppc.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64.rpm
avahi-glib-0.6.31-20.el7.ppc.rpm
avahi-glib-0.6.31-20.el7.ppc64.rpm
avahi-gobject-0.6.31-20.el7.ppc.rpm
avahi-gobject-0.6.31-20.el7.ppc64.rpm
avahi-libs-0.6.31-20.el7.ppc.rpm
avahi-libs-0.6.31-20.el7.ppc64.rpm
avahi-ui-gtk3-0.6.31-20.el7.ppc.rpm
avahi-ui-gtk3-0.6.31-20.el7.ppc64.rpm

ppc64le:
avahi-0.6.31-20.el7.ppc64le.rpm
avahi-autoipd-0.6.31-20.el7.ppc64le.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64le.rpm
avahi-glib-0.6.31-20.el7.ppc64le.rpm
avahi-gobject-0.6.31-20.el7.ppc64le.rpm
avahi-libs-0.6.31-20.el7.ppc64le.rpm
avahi-ui-gtk3-0.6.31-20.el7.ppc64le.rpm

s390x:
avahi-0.6.31-20.el7.s390.rpm
avahi-0.6.31-20.el7.s390x.rpm
avahi-autoipd-0.6.31-20.el7.s390x.rpm
avahi-debuginfo-0.6.31-20.el7.s390.rpm
avahi-debuginfo-0.6.31-20.el7.s390x.rpm
avahi-glib-0.6.31-20.el7.s390.rpm
avahi-glib-0.6.31-20.el7.s390x.rpm
avahi-gobject-0.6.31-20.el7.s390.rpm
avahi-gobject-0.6.31-20.el7.s390x.rpm
avahi-libs-0.6.31-20.el7.s390.rpm
avahi-libs-0.6.31-20.el7.s390x.rpm
avahi-ui-gtk3-0.6.31-20.el7.s390.rpm
avahi-ui-gtk3-0.6.31-20.el7.s390x.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
avahi-compat-howl-0.6.31-20.el7.ppc.rpm
avahi-compat-howl-0.6.31-20.el7.ppc64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.ppc.rpm
avahi-compat-howl-devel-0.6.31-20.el7.ppc64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.ppc.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.ppc64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc64.rpm
avahi-debuginfo-0.6.31-20.el7.ppc.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64.rpm
avahi-devel-0.6.31-20.el7.ppc.rpm
avahi-devel-0.6.31-20.el7.ppc64.rpm
avahi-dnsconfd-0.6.31-20.el7.ppc64.rpm
avahi-glib-devel-0.6.31-20.el7.ppc.rpm
avahi-glib-devel-0.6.31-20.el7.ppc64.rpm
avahi-gobject-devel-0.6.31-20.el7.ppc.rpm
avahi-gobject-devel-0.6.31-20.el7.ppc64.rpm
avahi-qt3-0.6.31-20.el7.ppc.rpm
avahi-qt3-0.6.31-20.el7.ppc64.rpm
avahi-qt3-devel-0.6.31-20.el7.ppc.rpm
avahi-qt3-devel-0.6.31-20.el7.ppc64.rpm
avahi-qt4-0.6.31-20.el7.ppc.rpm
avahi-qt4-0.6.31-20.el7.ppc64.rpm
avahi-qt4-devel-0.6.31-20.el7.ppc.rpm
avahi-qt4-devel-0.6.31-20.el7.ppc64.rpm
avahi-tools-0.6.31-20.el7.ppc64.rpm
avahi-ui-0.6.31-20.el7.ppc.rpm
avahi-ui-0.6.31-20.el7.ppc64.rpm
avahi-ui-devel-0.6.31-20.el7.ppc.rpm
avahi-ui-devel-0.6.31-20.el7.ppc64.rpm
avahi-ui-tools-0.6.31-20.el7.ppc64.rpm

ppc64le:
avahi-compat-howl-0.6.31-20.el7.ppc64le.rpm
avahi-compat-howl-devel-0.6.31-20.el7.ppc64le.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.ppc64le.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.ppc64le.rpm
avahi-debuginfo-0.6.31-20.el7.ppc64le.rpm
avahi-devel-0.6.31-20.el7.ppc64le.rpm
avahi-dnsconfd-0.6.31-20.el7.ppc64le.rpm
avahi-glib-devel-0.6.31-20.el7.ppc64le.rpm
avahi-gobject-devel-0.6.31-20.el7.ppc64le.rpm
avahi-qt3-0.6.31-20.el7.ppc64le.rpm
avahi-qt3-devel-0.6.31-20.el7.ppc64le.rpm
avahi-qt4-0.6.31-20.el7.ppc64le.rpm
avahi-qt4-devel-0.6.31-20.el7.ppc64le.rpm
avahi-tools-0.6.31-20.el7.ppc64le.rpm
avahi-ui-0.6.31-20.el7.ppc64le.rpm
avahi-ui-devel-0.6.31-20.el7.ppc64le.rpm
avahi-ui-tools-0.6.31-20.el7.ppc64le.rpm

s390x:
avahi-compat-howl-0.6.31-20.el7.s390.rpm
avahi-compat-howl-0.6.31-20.el7.s390x.rpm
avahi-compat-howl-devel-0.6.31-20.el7.s390.rpm
avahi-compat-howl-devel-0.6.31-20.el7.s390x.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.s390.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.s390x.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.s390.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.s390x.rpm
avahi-debuginfo-0.6.31-20.el7.s390.rpm
avahi-debuginfo-0.6.31-20.el7.s390x.rpm
avahi-devel-0.6.31-20.el7.s390.rpm
avahi-devel-0.6.31-20.el7.s390x.rpm
avahi-dnsconfd-0.6.31-20.el7.s390x.rpm
avahi-glib-devel-0.6.31-20.el7.s390.rpm
avahi-glib-devel-0.6.31-20.el7.s390x.rpm
avahi-gobject-devel-0.6.31-20.el7.s390.rpm
avahi-gobject-devel-0.6.31-20.el7.s390x.rpm
avahi-qt3-0.6.31-20.el7.s390.rpm
avahi-qt3-0.6.31-20.el7.s390x.rpm
avahi-qt3-devel-0.6.31-20.el7.s390.rpm
avahi-qt3-devel-0.6.31-20.el7.s390x.rpm
avahi-qt4-0.6.31-20.el7.s390.rpm
avahi-qt4-0.6.31-20.el7.s390x.rpm
avahi-qt4-devel-0.6.31-20.el7.s390.rpm
avahi-qt4-devel-0.6.31-20.el7.s390x.rpm
avahi-tools-0.6.31-20.el7.s390x.rpm
avahi-ui-0.6.31-20.el7.s390.rpm
avahi-ui-0.6.31-20.el7.s390x.rpm
avahi-ui-devel-0.6.31-20.el7.s390.rpm
avahi-ui-devel-0.6.31-20.el7.s390x.rpm
avahi-ui-tools-0.6.31-20.el7.s390x.rpm

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
avahi-0.6.31-20.el7.src.rpm

x86_64:
avahi-0.6.31-20.el7.i686.rpm
avahi-0.6.31-20.el7.x86_64.rpm
avahi-autoipd-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-glib-0.6.31-20.el7.i686.rpm
avahi-glib-0.6.31-20.el7.x86_64.rpm
avahi-gobject-0.6.31-20.el7.i686.rpm
avahi-gobject-0.6.31-20.el7.x86_64.rpm
avahi-libs-0.6.31-20.el7.i686.rpm
avahi-libs-0.6.31-20.el7.x86_64.rpm
avahi-ui-gtk3-0.6.31-20.el7.i686.rpm
avahi-ui-gtk3-0.6.31-20.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

x86_64:
avahi-compat-howl-0.6.31-20.el7.i686.rpm
avahi-compat-howl-0.6.31-20.el7.x86_64.rpm
avahi-compat-howl-devel-0.6.31-20.el7.i686.rpm
avahi-compat-howl-devel-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-0.6.31-20.el7.x86_64.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.i686.rpm
avahi-compat-libdns_sd-devel-0.6.31-20.el7.x86_64.rpm
avahi-debuginfo-0.6.31-20.el7.i686.rpm
avahi-debuginfo-0.6.31-20.el7.x86_64.rpm
avahi-devel-0.6.31-20.el7.i686.rpm
avahi-devel-0.6.31-20.el7.x86_64.rpm
avahi-dnsconfd-0.6.31-20.el7.x86_64.rpm
avahi-glib-devel-0.6.31-20.el7.i686.rpm
avahi-glib-devel-0.6.31-20.el7.x86_64.rpm
avahi-gobject-devel-0.6.31-20.el7.i686.rpm
avahi-gobject-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt3-0.6.31-20.el7.i686.rpm
avahi-qt3-0.6.31-20.el7.x86_64.rpm
avahi-qt3-devel-0.6.31-20.el7.i686.rpm
avahi-qt3-devel-0.6.31-20.el7.x86_64.rpm
avahi-qt4-0.6.31-20.el7.i686.rpm
avahi-qt4-0.6.31-20.el7.x86_64.rpm
avahi-qt4-devel-0.6.31-20.el7.i686.rpm
avahi-qt4-devel-0.6.31-20.el7.x86_64.rpm
avahi-tools-0.6.31-20.el7.x86_64.rpm
avahi-ui-0.6.31-20.el7.i686.rpm
avahi-ui-0.6.31-20.el7.x86_64.rpm
avahi-ui-devel-0.6.31-20.el7.i686.rpm
avahi-ui-devel-0.6.31-20.el7.x86_64.rpm
avahi-ui-tools-0.6.31-20.el7.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2017-6519
https://access.redhat.com/security/updates/classification/#low
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2020 Red Hat, Inc.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=te5C
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBXoV/I2aOgq3Tt24GAQgsbQ/9FvTjk1bVfjQA3TfAwQ3Vmkdp0wbtJdyZ
jB22p5B5STzceeMr4K+YP9oMKuCnZ7F2bKC5+tZCMC08AXbDU3lYvYBrl+6cl2gO
pmpOcfEBbh+5HyNv6eEBDzfeAPN70wK5FeInXYvjDFP2vNKcnitx8UVWLWXSI7Px
nClqyBlaGOTa8YV8ki1MYkD6gCI8nZeQ1J3k9p1x8g0GBlqzFE3pfpQ+8H9hObRC
jaMqLlaEDjVNrYiTdbgxpNZb+aj8ZDggRKx7hNFZIodb8dhqsXheGLkVmMJA7xuz
1Kn8tTckV6KlioZY2V3nCMvHHrtYMZ5AXV6rMcYsekhA3roZ5I+FP7o/DXh0ylvP
pqWO81w7qmv7CylRTpoG7JblPTBP8IvHYWYuhnSEXP+OjxIf4s4aZj2b6rVKbEUu
A0fM/XHvZmVck3rv1IlI07Zfpf5B8LoJJRAiLt/kuSIhQFqDKXxqipnspZiAqj//
Ojfg777hH1z0vS8/7byRLhzg9Z70zPuzSs2HRtJD6HTiNRNWK7iDZXHjFRzq5c+X
uCQ4yUZF7egThaZZmI6pKXwR+f4AY3wsA3SxHeqfzS06KydHIOjWSfYUrzkXMndD
bykehg/L99gmjc51XZ+do73OhxCOWW7r6RsBEyYXBhh5eM1Ke7N5vEtUGMld3f0b
LmC+Mgwzob8=
=qZ7J
-----END PGP SIGNATURE-----