Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

High Exploit Risk Identified in Ubuntu 20.04 PackageSolution Vulnerability

opensuse
Calendar Grey January 27, 2026
Dist Opensuse Esm H88
Update for openSUSE addresses three bugs in Avahi with moderate severity and provides patch instructions.
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

Description

This update for avahi fixes the following issues:

- CVE-2025-68276: Fixed refuse to create wide-area record browsers when

wide-area is off (bsc#1256498)

- CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500)

- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499)

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-193=1

Patch

Package List

- openSUSE Leap 16.0:

avahi-0.8-160000.4.1

avahi-autoipd-0.8-160000.4.1

avahi-compat-howl-devel-0.8-160000.4.1

avahi-compat-mDNSResponder-devel-0.8-160000.4.1

avahi-lang-0.8-160000.4.1

avahi-utils-0.8-160000.4.1

avahi-utils-gtk-0.8-160000.4.1

libavahi-client3-0.8-160000.4.1

libavahi-common3-0.8-160000.4.1

libavahi-core7-0.8-160000.4.1

libavahi-devel-0.8-160000.4.1

libavahi-glib-devel-0.8-160000.4.1

libavahi-glib1-0.8-160000.4.1

libavahi-gobject-devel-0.8-160000.4.1

libavahi-gobject0-0.8-160000.4.1

libavahi-libevent1-0.8-160000.4.1

libavahi-qt6-1-0.8-160000.4.1

libavahi-qt6-devel-0.8-160000.4.1

libavahi-ui-gtk3-0-0.8-160000.4.1

libdns_sd-0.8-160000.4.1

libhowl0-0.8-160000.4.1

python3-avahi-gtk-0.8-160000.4.1

python313-avahi-0.8-160000.4.1

typelib-1_0-Avahi-0_6-0.8-160000.4.1

References

* bsc#1256498

* bsc#1256499

* bsc#1256500

References:

* https://www.suse.com/security/cve/CVE-2025-68276.html

* https://www.suse.com/security/cve/CVE-2025-68468.html

* https://www.suse.com/security/cve/CVE-2025-68471.html

Announcement ID: openSUSE-SU-2026:20110-1
Rating: moderate
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here