{"id":"openSUSE-SU-2026:21014-1","summary":"Security update for avahi","details":"This update for avahi fixes the following issues:\n\n- CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546).\n- CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the `avahi-daemon`\n  (bsc#1257235).\n","modified":"2026-06-30T18:24:41.854075408Z","published":"2026-06-22T14:40:15Z","related":["CVE-2026-24401","CVE-2026-34933"],"upstream":["CVE-2026-24401","CVE-2026-34933"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257235"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261546"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-24401"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-34933"}],"affected":[{"package":{"name":"avahi","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/avahi&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"ecosystem_specific":{"binaries":[{"libavahi-libevent1":"0.8-160000.5.1","libavahi-glib-devel":"0.8-160000.5.1","avahi-utils-gtk":"0.8-160000.5.1","libdns_sd":"0.8-160000.5.1","avahi-autoipd":"0.8-160000.5.1","avahi-compat-mDNSResponder-devel":"0.8-160000.5.1","avahi":"0.8-160000.5.1","python313-avahi":"0.8-160000.5.1","avahi-lang":"0.8-160000.5.1","libhowl0":"0.8-160000.5.1","libavahi-common3":"0.8-160000.5.1","libavahi-client3":"0.8-160000.5.1","libavahi-qt6-1":"0.8-160000.5.1","libavahi-ui-gtk3-0":"0.8-160000.5.1","typelib-1_0-Avahi-0_6":"0.8-160000.5.1","python3-avahi-gtk":"0.8-160000.5.1","libavahi-glib1":"0.8-160000.5.1","libavahi-core7":"0.8-160000.5.1","avahi-utils":"0.8-160000.5.1","libavahi-gobject0":"0.8-160000.5.1","avahi-compat-howl-devel":"0.8-160000.5.1","libavahi-qt6-devel":"0.8-160000.5.1","libavahi-devel":"0.8-160000.5.1","libavahi-gobject-devel":"0.8-160000.5.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21014-1.json"}},{"package":{"name":"avahi-glib2","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/avahi-glib2&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"ecosystem_specific":{"binaries":[{"libavahi-glib1":"0.8-160000.5.1","python313-avahi":"0.8-160000.5.1","avahi-utils-gtk":"0.8-160000.5.1","libavahi-gobject-devel":"0.8-160000.5.1","python3-avahi-gtk":"0.8-160000.5.1","libavahi-client3":"0.8-160000.5.1","libavahi-gobject0":"0.8-160000.5.1","libavahi-glib-devel":"0.8-160000.5.1","avahi-lang":"0.8-160000.5.1","avahi-compat-mDNSResponder-devel":"0.8-160000.5.1","libavahi-libevent1":"0.8-160000.5.1","libavahi-qt6-1":"0.8-160000.5.1","avahi-utils":"0.8-160000.5.1","typelib-1_0-Avahi-0_6":"0.8-160000.5.1","avahi":"0.8-160000.5.1","libavahi-ui-gtk3-0":"0.8-160000.5.1","libhowl0":"0.8-160000.5.1","avahi-compat-howl-devel":"0.8-160000.5.1","libavahi-core7":"0.8-160000.5.1","libavahi-devel":"0.8-160000.5.1","libavahi-common3":"0.8-160000.5.1","avahi-autoipd":"0.8-160000.5.1","libavahi-qt6-devel":"0.8-160000.5.1","libdns_sd":"0.8-160000.5.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21014-1.json"}},{"package":{"name":"avahi-qt6","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/avahi-qt6&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8-160000.5.1"}]}],"ecosystem_specific":{"binaries":[{"libavahi-common3":"0.8-160000.5.1","avahi-compat-mDNSResponder-devel":"0.8-160000.5.1","libavahi-qt6-1":"0.8-160000.5.1","libavahi-ui-gtk3-0":"0.8-160000.5.1","libavahi-qt6-devel":"0.8-160000.5.1","python3-avahi-gtk":"0.8-160000.5.1","avahi-utils":"0.8-160000.5.1","libhowl0":"0.8-160000.5.1","libavahi-libevent1":"0.8-160000.5.1","avahi-lang":"0.8-160000.5.1","python313-avahi":"0.8-160000.5.1","libdns_sd":"0.8-160000.5.1","libavahi-devel":"0.8-160000.5.1","avahi-utils-gtk":"0.8-160000.5.1","typelib-1_0-Avahi-0_6":"0.8-160000.5.1","libavahi-gobject0":"0.8-160000.5.1","libavahi-glib-devel":"0.8-160000.5.1","avahi-compat-howl-devel":"0.8-160000.5.1","libavahi-core7":"0.8-160000.5.1","avahi":"0.8-160000.5.1","avahi-autoipd":"0.8-160000.5.1","libavahi-gobject-devel":"0.8-160000.5.1","libavahi-client3":"0.8-160000.5.1","libavahi-glib1":"0.8-160000.5.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21014-1.json"}}],"schema_version":"1.7.5"}