{"id":"CVE-2025-68276","aliases":["ALPINE-CVE-2025-68276","AZL-74271","AZL-74285","BELL-CVE-2025-68276","CLSA-2026-1785765391","CLSA-2026-1786027278","CLSA-2026-1786533280","DEBIAN-CVE-2025-68276","EUVD-2025-206280","GHSA-mhf3-865v-g5rc","MGASA-2026-0016","OESA-2026-1236","RHSA-2026:11316","ROOT-OS-DEBIAN-12-CVE-2025-68276","ROOT-OS-DEBIAN-13-CVE-2025-68276","SUSE-SU-2026:0143-1","SUSE-SU-2026:0259-1","SUSE-SU-2026:0422-1","SUSE-SU-2026:0577-1","SUSE-SU-2026:20145-1","SUSE-SU-2026:20167-1","SUSE-SU-2026:20525-1","SUSE-SU-2026:21445-1","UBUNTU-CVE-2025-68276","USN-7967-1","openSUSE-SU-2026:10052-1","openSUSE-SU-2026:20110-1"],"status":"published","title":"Avahi has a reachable assertion in avahi_wide_area_scan_cache","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00156,"percentile":0.04815,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2026-01-12T17:31:49Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"avahi","fixed_in":["0.8-r25"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"avahi","fixed_in":["0.8-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"avahi","fixed_in":["0.8-6"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"avahi","fixed_in":["0.8-r25"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"avahi","fixed_in":["0.8-18"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"avahi","fixed_in":["0.8-10+deb12u1.root.io.11","0.8-10+deb12u1.root.io.9","0.8-10+deb12u1.root.io.10","0.8-10+deb12u1.root.io.12","0.8-10+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-avahi","fixed_in":["0.8-10+deb12u1.root.io.11","0.8-10+deb12u1.root.io.9","0.8-10+deb12u1.root.io.10","0.8-10+deb12u1.root.io.12","0.8-10+deb12u1.aikido.13"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"avahi","fixed_in":["0.8-16.aikido.7","0.8-16.root.io.1","0.8-16.root.io.2","0.8-16.root.io.3","0.8-16.root.io.4","0.8-16.root.io.5","0.8-16.root.io.6","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-avahi","fixed_in":["0.8-16.aikido.7","0.8-16.root.io.1","0.8-16.root.io.2","0.8-16.root.io.3","0.8-16.root.io.4","0.8-16.root.io.5","0.8-16.root.io.6","0.8-16.aikido.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","fixed_in":["0.6.31-4ubuntu1.3+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","fixed_in":["0.6.32~rc+dfsg-1ubuntu2.3+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","fixed_in":["0.7-3.1ubuntu1.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","fixed_in":["0.7-4ubuntu7.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"avahi","fixed_in":["0.8-5ubuntu5.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"avahi","fixed_in":["0.8-13ubuntu6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"avahi","fixed_in":["0.8-16ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-r25"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-6"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8-r5"},{"fixed":"0.8-r25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-12.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-qt3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-qt3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-qt4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-20.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-22.el9_6.1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-10","0.8-10+deb12u1","0.8-11","0.8-12","0.8-13","0.8-14","0.8-15","0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8-16","0.8-17","0.8-18"]},{"source":"osv","ecosystem":"Debian:14","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-18"}]}],"versions":["0.8-16","0.8-17"]},{"source":"osv","ecosystem":"Mageia:9","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10.3.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-15.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-25.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-25.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-25.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-25.oe2403sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-25.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-autoipd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-howl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-compat-libdns_sd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-dnsconfd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-sharp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-sharp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"avahi-ui-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9~rc4-0.1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Root:Debian:12","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10+deb12u1.root.io.11"},{"fixed":"0.8-10+deb12u1.root.io.9"},{"fixed":"0.8-10+deb12u1.root.io.10"},{"fixed":"0.8-10+deb12u1.root.io.12"},{"fixed":"0.8-10+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-10+deb12u1.root.io.11"},{"fixed":"0.8-10+deb12u1.root.io.9"},{"fixed":"0.8-10+deb12u1.root.io.10"},{"fixed":"0.8-10+deb12u1.root.io.12"},{"fixed":"0.8-10+deb12u1.aikido.13"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.root.io.1"},{"fixed":"0.8-16.root.io.2"},{"fixed":"0.8-16.root.io.3"},{"fixed":"0.8-16.root.io.4"},{"fixed":"0.8-16.root.io.5"},{"fixed":"0.8-16.root.io.6"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16.aikido.7"},{"fixed":"0.8-16.root.io.1"},{"fixed":"0.8-16.root.io.2"},{"fixed":"0.8-16.root.io.3"},{"fixed":"0.8-16.root.io.4"},{"fixed":"0.8-16.root.io.5"},{"fixed":"0.8-16.root.io.6"},{"fixed":"0.8-16.aikido.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-150100.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"avahi-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150600.15.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32-32.36.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-150400.7.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-7.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-4ubuntu1.3+esm4"}]}],"versions":["0.6.31-2ubuntu4","0.6.31-2ubuntu5","0.6.31-3ubuntu1","0.6.31-4ubuntu1","0.6.31-4ubuntu1.1","0.6.31-4ubuntu1.2","0.6.31-4ubuntu1.3","0.6.31-4ubuntu1.3+esm1","0.6.31-4ubuntu1.3+esm2","0.6.31-4ubuntu1.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32~rc+dfsg-1ubuntu2.3+esm4"}]}],"versions":["0.6.31-4ubuntu4","0.6.32~rc+dfsg-1ubuntu2","0.6.32~rc+dfsg-1ubuntu2.1","0.6.32~rc+dfsg-1ubuntu2.2","0.6.32~rc+dfsg-1ubuntu2.3","0.6.32~rc+dfsg-1ubuntu2.3+esm1","0.6.32~rc+dfsg-1ubuntu2.3+esm2","0.6.32~rc+dfsg-1ubuntu2.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-3.1ubuntu1.3+esm3"}]}],"versions":["0.6.32-1ubuntu1","0.7-3ubuntu1","0.7-3ubuntu2","0.7-3.1ubuntu1","0.7-3.1ubuntu1.1","0.7-3.1ubuntu1.2","0.7-3.1ubuntu1.3","0.7-3.1ubuntu1.3+esm1","0.7-3.1ubuntu1.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-4ubuntu7.3+esm1"}]}],"versions":["0.7-4ubuntu5","0.7-4ubuntu6","0.7-4ubuntu7","0.7-4ubuntu7.1","0.7-4ubuntu7.2","0.7-4ubuntu7.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5ubuntu5.4"}]}],"versions":["0.8-5ubuntu4","0.8-5ubuntu5","0.8-5ubuntu5.1","0.8-5ubuntu5.2","0.8-5ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-13ubuntu6.1"}]}],"versions":["0.8-10ubuntu1","0.8-13ubuntu1","0.8-13ubuntu2","0.8-13ubuntu4","0.8-13ubuntu5","0.8-13ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16ubuntu3.1"}]}],"versions":["0.8-16ubuntu2","0.8-16ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.31-4ubuntu1.3+esm4"}]}],"versions":["0.6.31-2ubuntu4","0.6.31-2ubuntu5","0.6.31-3ubuntu1","0.6.31-4ubuntu1","0.6.31-4ubuntu1.1","0.6.31-4ubuntu1.2","0.6.31-4ubuntu1.3","0.6.31-4ubuntu1.3+esm1","0.6.31-4ubuntu1.3+esm2","0.6.31-4ubuntu1.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.32~rc+dfsg-1ubuntu2.3+esm4"}]}],"versions":["0.6.31-4ubuntu4","0.6.32~rc+dfsg-1ubuntu2","0.6.32~rc+dfsg-1ubuntu2.1","0.6.32~rc+dfsg-1ubuntu2.2","0.6.32~rc+dfsg-1ubuntu2.3","0.6.32~rc+dfsg-1ubuntu2.3+esm1","0.6.32~rc+dfsg-1ubuntu2.3+esm2","0.6.32~rc+dfsg-1ubuntu2.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-3.1ubuntu1.3+esm3"}]}],"versions":["0.6.32-1ubuntu1","0.7-3ubuntu1","0.7-3ubuntu2","0.7-3.1ubuntu1","0.7-3.1ubuntu1.1","0.7-3.1ubuntu1.2","0.7-3.1ubuntu1.3","0.7-3.1ubuntu1.3+esm1","0.7-3.1ubuntu1.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7-4ubuntu7.3+esm1"}]}],"versions":["0.7-4ubuntu5","0.7-4ubuntu6","0.7-4ubuntu7","0.7-4ubuntu7.1","0.7-4ubuntu7.2","0.7-4ubuntu7.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-5ubuntu5.4"}]}],"versions":["0.8-5ubuntu4","0.8-5ubuntu5","0.8-5ubuntu5.1","0.8-5ubuntu5.2","0.8-5ubuntu5.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-13ubuntu6.1"}]}],"versions":["0.8-10ubuntu1","0.8-13ubuntu1","0.8-13ubuntu2","0.8-13ubuntu4","0.8-13ubuntu5","0.8-13ubuntu6"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-16ubuntu3.1"}]}],"versions":["0.8-16ubuntu2","0.8-16ubuntu3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi-glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"avahi-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.4.1"}]}],"bundled":3}],"products":[{"vendor":"avahi","product":"avahi"}],"references":[{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-mhf3-865v-g5rc","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/avahi/avahi/pull/806","tags":["x_refsource_MISC","Issue Tracking","Patch","fix","article","report"]},{"url":"https://github.com/avahi/avahi/commit/ede7048475c5d47d53890e3bc1350dda8e0b3688","tags":["x_refsource_MISC","Patch","fix","article","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-68276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68276","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-68276","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1785765391.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34933","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1786027278.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68468","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68471","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786533280.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59529","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68276.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-68276","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0016.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34887","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/DR2CTF5XR6GVX3JYIAAO3ULJNUZDGBVS/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7967-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1236","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:11316","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68276","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68468","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68471","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-24401","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-34933","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11316.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428713","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68276","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428714","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68468","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a","tags":["article"]},{"url":"https://github.com/avahi/avahi/issues/683","tags":["article"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-cp79-r4x9-vf52","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68471","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1","tags":["article"]},{"url":"https://github.com/avahi/avahi/issues/678","tags":["article"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-56rf-42xr-qmmg","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432534","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-24401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24401","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/78eab31128479f06e30beb8c1cbf99dd921e2524","tags":["article"]},{"url":"https://github.com/avahi/avahi/issues/501","tags":["article"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-h4vp-5m8j-f6w3","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34933","tags":["advisory"]},{"url":"https://github.com/avahi/avahi/commit/625ca0fac19229f6dfa3a6c6b698ae657187e50c","tags":["article"]},{"url":"https://github.com/avahi/avahi/pull/891","tags":["article"]},{"url":"https://github.com/avahi/avahi/security/advisories/GHSA-w65r-6gxh-vhvc","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260143-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256498","tags":["report"]},{"url":"https://bugzilla.suse.com/1256499","tags":["report"]},{"url":"https://bugzilla.suse.com/1256500","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68471","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260259-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260422-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260577-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620145-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620167-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620525-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1233421","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52615","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621445-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-68276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68468","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-68471","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-68276","title":"Avahi has a reachable assertion in avahi_wide_area_scan_cache","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T17:31:49.652Z","modified":"2026-01-12T18:41:22.098Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:32:35.742256Z"}],"euvd":[{"id":"EUVD-2025-206280","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T17:31:49Z","modified":"2026-01-12T18:41:22Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:48:53.22038Z"}],"nvd":[{"id":"CVE-2025-68276","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T18:15:47.56Z","modified":"2026-06-17T09:58:51.22Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:11:56.616231Z"}],"osv":[{"id":"ALPINE-CVE-2025-68276","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T18:15:47.56Z","modified":"2026-08-27T22:18:03.053225588Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"BELL-CVE-2025-68276","status":"published","published":"2026-01-14T06:06:10.837065Z","modified":"2026-04-09T07:18:05.919198Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:22.77042Z"},{"id":"CVE-2025-68276","title":"Avahi has a reachable assertion in avahi_wide_area_scan_cache","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T17:31:49.652Z","modified":"2026-10-28T02:31:01.45411459Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:44:52.53036Z"},{"id":"DEBIAN-CVE-2025-68276","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling the RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T18:15:47.56Z","modified":"2026-09-01T20:05:56.77105976Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:48.025964Z"},{"id":"OESA-2026-1236","title":"avahi security update","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. This enables you to plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared.\r\n\r\nSecurity Fix(es):\n\nAvahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.(CVE-2025-68276)\n\nAvahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they expire avahi-daemon crashes.(CVE-2025-68468)\n\nAvahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.(CVE-2025-68471)","status":"published","published":"2026-01-23T11:10:16Z","modified":"2026-08-18T01:19:29.995915108Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"RHSA-2026:11316","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-04-28T10:08:10Z","modified":"2026-10-06T10:31:13.167428395Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-68276","title":"CVE-2025-68276 in avahi - Patched by Root","description":"Root has patched CVE-2025-68276 in the avahi package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T08:31:45Z","modified":"2026-08-26T01:10:10.686691629Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-68276","title":"CVE-2025-68276 in avahi - Patched by Root","description":"Root has patched CVE-2025-68276 in the avahi package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-08-23T14:15:48Z","modified":"2026-08-23T17:00:05.9231469Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"UBUNTU-CVE-2025-68276","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling the RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T18:15:00Z","modified":"2026-04-22T16:10:16.459778Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"AZL-74271","title":"CVE-2025-68276 affecting package avahi for versions less than 0.8-5","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T18:15:47Z","modified":"2026-04-21T04:38:41.738346Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"AZL-74285","title":"CVE-2025-68276 affecting package avahi for versions less than 0.8-6","description":"Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.","status":"published","published":"2026-01-12T18:15:47Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"CLSA-2026-1785765391","title":"avahi: Fix of 2 CVEs","description":"- CVE-2025-68276: refuse to create wide-area record browsers when\n  wide-area lookups are disabled; an unprivileged local user could crash\n  avahi-daemon over D-Bus by passing AVAHI_LOOKUP_USE_WIDE_AREA to\n  RecordBrowserNew, reaching an assertion in avahi_wide_area_scan_cache\n- CVE-2026-34933: reject publish flags that set both\n  AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST; the\n  conflicting pair tripped an assertion in transport_flags_from_domain\n  and crashed avahi-daemon from any unprivileged local D-Bus caller","status":"published","published":"2026-08-03T13:56:44Z","modified":"2026-10-26T09:30:30.512549518Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786027278","title":"avahi: Fix of 4 CVEs","description":"- CVE-2025-68468: fix remote denial of service via crafted mDNS CNAME announcements (assertion failure in lookup_multicast_callback)\n- CVE-2025-68471: fix remote denial of service via unsolicited CNAME announcements (assertion failure in lookup_start)\n- CVE-2025-68276: fix local denial of service via D-Bus record browsers using AVAHI_LOOKUP_USE_WIDE_AREA when wide-area is disabled\n- CVE-2026-34933: fix local denial of service via D-Bus publish flags setting both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST","status":"published","published":"2026-08-06T14:41:41Z","modified":"2026-10-26T09:43:55.103700231Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786533280","title":"avahi: Fix of 3 CVEs","description":"- CVE-2026-34933: refuse publish flags with both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST set\n- CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion\n- CVE-2025-68276: refuse to create wide-area record browsers when wide-area is off","status":"published","published":"2026-08-13T05:52:23Z","modified":"2026-10-26T09:43:17.441634841Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"MGASA-2026-0016","title":"Updated avahi packages fix security vulnerabilities","description":"Avahi has a reachable assertion in avahi_wide_area_scan_cache.\n(CVE-2025-68276)\nAvahi has a reachable assertion in lookup_multicast_callback.\n(CVE-2025-68468)\nAvahi has a reachable assertion in lookup_start. (CVE-2025-68471)\n","status":"published","published":"2026-01-23T00:11:41Z","modified":"2026-04-16T04:41:39.143869485Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10052-1","title":"avahi-0.8-41.1 on GA media","description":"These are all security issues fixed in the avahi-0.8-41.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-15T00:00:00Z","modified":"2026-03-23T04:54:23.6675Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20110-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-68276: Fixed refuse to create wide-area record browsers when\n  wide-area is off (bsc#1256498)\n- CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)\n- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)\n","status":"published","published":"2026-01-26T10:20:39Z","modified":"2026-03-23T04:54:44.753578Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:0143-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n \n- CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon (bsc#1256498).\n- CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lead to crash of avahi-daemon (bsc#1256499).\n- CVE-2025-68471: avahi: reachable assertion in `lookup_start` can lead to crash of avahi-daemon (bsc#1256500).\n","status":"published","published":"2026-01-17T11:04:15Z","modified":"2026-03-23T04:51:57.377607Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0259-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-68276: Fixed refuse to create wide-area record browsers when \n  wide-area is off (bsc#1256498)\n- CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)\n- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)\n","status":"published","published":"2026-01-22T16:10:45Z","modified":"2026-03-23T04:52:04.295148Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0422-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon (bsc#1256498).\n- CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lead to crash of avahi-daemon (bsc#1256499).\n- CVE-2025-68471: avahi: reachable assertion in `lookup_start` can lead to crash of avahi-daemon (bsc#1256500).\n","status":"published","published":"2026-02-11T06:50:43Z","modified":"2026-03-23T04:52:13.226463Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0577-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-68276: Fixed refuse to create wide-area record browsers when \n  wide-area is off (bsc#1256498)\n- CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)\n- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)\n","status":"published","published":"2026-02-18T15:49:23Z","modified":"2026-02-19T14:05:03.41665Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20145-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-68276: Fixed refuse to create wide-area record browsers when\n  wide-area is off (bsc#1256498)\n- CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)\n- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)\n","status":"published","published":"2026-01-26T09:42:41Z","modified":"2026-03-23T04:52:37.693697Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20167-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-68276: Fixed refuse to create wide-area record browsers when\n  wide-area is off (bsc#1256498)\n- CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)\n- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)\n","status":"published","published":"2026-01-26T09:42:41Z","modified":"2026-03-23T04:52:39.520625Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20525-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2024-52615: Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (bsc#1233421)\n- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion. (bsc#1256499)\n- CVE-2025-68471: Fixed DoS bug by changing assert to return. (bsc#1256500)\n- CVE-2025-68276: Refuse to create wide-area record browsers when wide-area is off. (bsc#1256498)\n","status":"published","published":"2026-02-26T10:54:54Z","modified":"2026-03-23T04:53:01.78233Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:21445-1","title":"Security update for avahi","description":"This update for avahi fixes the following issues:\n\n- CVE-2025-68276: reachable assertion in `avahi_wide_area_scan_cache` can lead to an `avahi-daemon` crash (bsc#1256498).\n- CVE-2025-68468: reachable assertion in `lookup_multicast_callback` can lead to an `avahi-daemon` crash (bsc#1256499).\n- CVE-2025-68471: reachable assertion in `lookup_start` can lead to an `avahi-daemon` crash (bsc#1256500).\n","status":"published","published":"2026-04-27T12:41:42Z","modified":"2026-05-05T18:23:55.062067Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"USN-7967-1","title":"avahi vulnerabilities","description":"It was discovered that Avahi incorrectly terminated when processing browser\nrecords with wide-area disabled. An attacker could possibly use this issue\nto cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records pointing to resource records with short TTLs. An\nattacker could possibly use this issue to cause Avahi to crash, resulting\nin a denial of service. (CVE-2025-68468)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records in quick succession. An attacker could possibly\nuse this issue to cause Avahi to crash, resulting in a denial of service.\n(CVE-2025-68471)","status":"published","published":"2026-01-19T12:30:55Z","modified":"2026-06-25T13:32:31.654720723Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}