MGASA-2026-0338 Updated avahi packages fix security vulnerabilities

Simple protocol server ignores accepts unlimited connections and logs failures without limit. CVE-2025-59529 Avahi has Uncontrolled Recursion in lookuphandlecname function. CVE-2026-24401 Reachable assertion in transportflagsfromdomain via conflicting publish flags crashes avahi-daemon...

Updated avahi packages fix security vulnerabilities

Simple protocol server ignores accepts unlimited connections and logs failures without limit. CVE-2025-59529 Avahi has Uncontrolled Recursion in lookuphandlecname function. CVE-2026-24401 Reachable assertion in transportflagsfromdomain via conflicting publish flags crashes avahi-daemon...

ROOT-OS-DEBIAN-12-CVE-2026-34933 CVE-2026-34933 in avahi - Patched by Root

Root has patched CVE-2026-34933 in the avahi package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68276 CVE-2025-68276 in avahi - Patched by Root

Root has patched CVE-2025-68276 in the avahi package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-52615 CVE-2024-52615 in avahi - Patched by Root

Root has patched CVE-2024-52615 in the avahi package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-24401 CVE-2026-24401 in avahi - Patched by Root

Root has patched CVE-2026-24401 in the avahi package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68471 CVE-2025-68471 in avahi - Patched by Root

Root has patched CVE-2025-68471 in the avahi package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-52616 CVE-2024-52616 in avahi - Patched by Root

Root has patched CVE-2024-52616 in the avahi package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68468 CVE-2025-68468 in avahi - Patched by Root

Root has patched CVE-2025-68468 in the avahi package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in avahi

A vulnerability was discovered in the avahi library. This flaw allows a non-privileged user to make a dbus call, causing the avahi daemon to crash...

Astra Linux – Vulnerability in avahi

A vulnerability was discovered in Avahi. There exists a potentially exploitable assertion within the dbussethostname function...

Astra Linux – Vulnerability in avahi

The avahi-daemon-check-dns.sh script within the Debian avahi package, as of version 0.8-4, is executed as the root user via /etc/network/if-up.d/avahi-daemon. This script allows a local attacker to cause a denial of service or create arbitrary empty files through a symlink attack on files located...

Astra Linux – Vulnerability in avahi

A vulnerability was discovered in Avahi. There exists a potentially exploitable assertion in the avahiescapelabel function...

Astra Linux – Vulnerability in avahi

In Avahi, including versions 0.6.32 and 0.7, avahi-daemon inadvertently responds to IPv6 unicast queries with source addresses that are not on-link. This allows remote attackers to cause a denial of service traffic amplification and may lead to information leakage by extracting potentially...

Astra Linux – Vulnerability in avahi

A flaw was discovered in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not handled correctly in the clientwork function, allowing a local attacker to trigger an infinite loop. The most significant threat from this...

ROOT-OS-DEBIAN-13-CVE-2026-34933 CVE-2026-34933 in avahi - Patched by Root

Root has patched CVE-2026-34933 in the avahi package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-59529 CVE-2025-59529 in avahi - Patched by Root

Root has patched CVE-2025-59529 in the avahi package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2024-52616 CVE-2024-52616 in avahi - Patched by Root

Root has patched CVE-2024-52616 in the avahi package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68468 CVE-2025-68468 in avahi - Patched by Root

Root has patched CVE-2025-68468 in the avahi package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-24401 CVE-2026-24401 in avahi - Patched by Root

Root has patched CVE-2026-24401 in the avahi package for Root:Debian:13. Multiple fixed versions available...