[CLSA-2026:1785765391] avahi: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-08-03 13:56:44 UTC
Description:
- CVE-2025-68276: refuse to create wide-area record browsers when wide-area lookups are disabled; an unprivileged local user could crash avahi-daemon over D-Bus by passing AVAHI_LOOKUP_USE_WIDE_AREA to RecordBrowserNew, reaching an assertion in avahi_wide_area_scan_cache - CVE-2026-34933: reject publish flags that set both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST; the conflicting pair tripped an assertion in transport_flags_from_domain and crashed avahi-daemon from any unprivileged local D-Bus caller
CVEs fixed:
Updated packages:
  • avahi-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:d42686f8b90ef017a59a7fd5eb5b4b113880308e0e76e9e4069b3405e86eb820
  • avahi-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:92a7cdb51f8f7fc0aa29f27220c611243be46dd43517ab27941481ae168857a4
  • avahi-autoipd-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:e527a1ba4c8c09c02e9ac343dbf8341425ffe5eb89d1177d74bddfeb2e2bea19
  • avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:90a51e57918f8228a33fcb8df849cb4be1647d4adeaf63f1fbf6772c5684f948
  • avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:e2fc881e7f77f3db85027379b4a0c11b439516c31a42cc94f43d75ad90eb97d6
  • avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:fcbb5859ee3beee45b8bc3619d0df32d5dcdcaf0cec150349019f83093acbdf4
  • avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:c73a8903c0dad2a87f0418616fa7a7ac5ab7e4fdbc08a6770a9d005bc6e3cb24
  • avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:b1d58a5d74bbf603be40608fa51fd9d2950a37dd1f35bcaa8b438fd5cc0a0979
  • avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:867a50627723d07524efe76528d72007f799e32d5c07d9fd957192c3d7eb7df5
  • avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:e17dcc7f4266ce21b532154f51deb04f8b2311b7f717edeed527188bfe65e437
  • avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:82d4aa3040c836a31c45326000b86c291f8a35898dbf045f971f0d80c3bc78ee
  • avahi-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:80dcc1a36455849fdcaef171bf4d8c9ebd591cf5a43abb1b8bd08c5401a236f9
  • avahi-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:5e8b0d5ed522a38ff26349a8b67a0b2e59077683ec11331fa6f5f3e9ef350919
  • avahi-dnsconfd-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:1682cc6317521a38272ecde66a5d7eb8fa715dc65a6e4a062896413ec31241b0
  • avahi-glib-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:9414e878554cf67a567fa298b8d8619022f61199b755ca374d0b396b844967d9
  • avahi-glib-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:270ef1128c617b098921e7d177a68b66bb428a89a1e2c42dab7da40f828ee061
  • avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:9039b36d01313243b18c6f136a860bccfe2725ca4e3a667cd0e2144963c1b0e4
  • avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:dfe902251df3c8c7b9df900193230c2ee5affb13c1b53060b4dcf952a7a14ea4
  • avahi-gobject-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:1931b409db7b2ace51a7b14cafb84e157cadf1d4c88bf2f39e74fb3b97d75d41
  • avahi-gobject-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:140e1e559e72d94ba8156c92b6477e47f68b0f00a959783ab33ece28411217d0
  • avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:cf874aea5060bce06ea88aceaf4d041ed6c3dae0d26ed7951a4018babdb890ca
  • avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:7d9d3c302d0b65fb2ce79dac8197a51c47aca09b7e25455e8a61fb36e2e404a6
  • avahi-libs-0.8-12.el9_2.1.tuxcare.els5.i686.rpm
    sha:5afed41d4f33cdd2c8af5a51050c18511cd05194feb914e488edceb9aa9b3eab
  • avahi-libs-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:d1e780ab7b2df015eb3b03df3543feca32e085de3f9d2520f4400bdea215cdf1
  • avahi-tools-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:231ddde95b2eb9984e7015b864820ae2051f192d8d518f3ec095d4a84d91dc7f
  • avahi-ui-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:224b6d165c8f2ef87da4158ae9faba874ab460b64d3139dc4c0482d2a38c65aa
  • avahi-ui-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:d2fcffd7bf2d71658e38a5e7ca416c4297f3e6e1b2bda5df93bf02e2ca07b417
  • avahi-ui-gtk3-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:716ae1b603e6b265c58b20610a44cd8b5e92cdc42dd7e4d137e011e65ef98a51
  • avahi-ui-tools-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm
    sha:08ceff0a973eda38d03e8717ff28a727c201a0ec488c8270fd478bc2e1c0fe4f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.