Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
An update that solves one vulnerability can now be installed.. # avahi-0.8-45.1 on GA media Announcement ID: openSUSE-SU-2026:11313-1 Rating: moderate Cross-References: * CVE-2025-59529 CVSS scores: * CVE-2025-59529 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59529 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the avahi-0.8-45.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * avahi 0.8-45.1 * avahi-autoipd 0.8-45.1 * avahi-compat-howl-devel 0.8-45.1 * avahi-compat-mDNSResponder-devel 0.8-45.1 * avahi-lang 0.8-45.1 * avahi-utils 0.8-45.1 * libavahi-client3 0.8-45.1 * libavahi-client3-32bit 0.8-45.1 * libavahi-common3 0.8-45.1 * libavahi-common3-32bit 0.8-45.1 * libavahi-core7 0.8-45.1 * libavahi-devel 0.8-45.1 * libavahi-libevent1 0.8-45.1 * libdns_sd 0.8-45.1 * libdns_sd-32bit 0.8-45.1 * libhowl0 0.8-45.1 * python313-avahi 0.8-45.1 * python314-avahi 0.8-45.1 ## References: * https://www.suse.com/security/cve/CVE-2025-59529.html . The update for openSUSE Tumbleweed avahi-0.8-45.1 addresses a moderate threat. Install for enhanced security.. openSUSE,avahi,security update. . Severity: moderate. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for avahi Announcement ID: SUSE-SU-2026:22338-1 Release Date: 2026-06-22T14:40:15Z Rating: moderate References: * bsc#1257235 * bsc#1261546 Cross-References: * CVE-2026-24401 * CVE-2026-34933 CVSS scores: * CVE-2026-24401 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-24401 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-24401 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-34933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34933 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). * CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the `avahi-daemon` (bsc#1257235). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1026=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1026=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * avahi-autoipd-0.8-160000.5.1 * libhowl0-debuginfo-0.8-160000.5.1 * libavahi-common3-0.8-160000.5.1 * libavahi-glib-devel-0.8-160000.5.1 * libavahi-client3-debuginfo-0.8-160000.5.1 * libdns_sd-0.8-160000.5.1 * libavahi-glib1-0.8-160000.5.1 * libavahi-core7-0.8-160000.5.1 *libdns_sd-debuginfo-0.8-160000.5.1 * libavahi-ui-gtk3-0-debuginfo-0.8-160000.5.1 * avahi-utils-gtk-0.8-160000.5.1 * libavahi-ui-gtk3-0-0.8-160000.5.1 * avahi-autoipd-debuginfo-0.8-160000.5.1 * typelib-1_0-Avahi-0_6-0.8-160000.5.1 * avahi-debuginfo-0.8-160000.5.1 * libavahi-core7-debuginfo-0.8-160000.5.1 * libavahi-gobject-devel-0.8-160000.5.1 * libavahi-devel-0.8-160000.5.1 * avahi-0.8-160000.5.1 * libavahi-client3-0.8-160000.5.1 * libavahi-common3-debuginfo-0.8-160000.5.1 * libavahi-libevent1-debuginfo-0.8-160000.5.1 * python313-avahi-0.8-160000.5.1 * avahi-utils-debuginfo-0.8-160000.5.1 * libavahi-gobject0-debuginfo-0.8-160000.5.1 * libhowl0-0.8-160000.5.1 * avahi-utils-gtk-debuginfo-0.8-160000.5.1 * avahi-debugsource-0.8-160000.5.1 * avahi-compat-mDNSResponder-devel-0.8-160000.5.1 * libavahi-gobject0-0.8-160000.5.1 * avahi-glib2-debugsource-0.8-160000.5.1 * python3-avahi-gtk-0.8-160000.5.1 * libavahi-glib1-debuginfo-0.8-160000.5.1 * libavahi-libevent1-0.8-160000.5.1 * avahi-utils-0.8-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * avahi-lang-0.8-160000.5.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * avahi-autoipd-0.8-160000.5.1 * libhowl0-debuginfo-0.8-160000.5.1 * libavahi-common3-0.8-160000.5.1 * libavahi-glib-devel-0.8-160000.5.1 * libavahi-client3-debuginfo-0.8-160000.5.1 * libdns_sd-0.8-160000.5.1 * libavahi-glib1-0.8-160000.5.1 * libavahi-core7-0.8-160000.5.1 * libdns_sd-debuginfo-0.8-160000.5.1 * libavahi-ui-gtk3-0-debuginfo-0.8-160000.5.1 * avahi-utils-gtk-0.8-160000.5.1 * libavahi-ui-gtk3-0-0.8-160000.5.1 * typelib-1_0-Avahi-0_6-0.8-160000.5.1 * avahi-autoipd-debuginfo-0.8-160000.5.1 * avahi-debuginfo-0.8-160000.5.1 * libavahi-core7-debuginfo-0.8-160000.5.1 * libavahi-devel-0.8-160000.5.1 * avahi-0.8-160000.5.1 * libavahi-gobject-devel-0.8-160000.5.1 *libavahi-client3-0.8-160000.5.1 * python313-avahi-0.8-160000.5.1 * libavahi-common3-debuginfo-0.8-160000.5.1 * libavahi-libevent1-debuginfo-0.8-160000.5.1 * avahi-utils-debuginfo-0.8-160000.5.1 * libavahi-gobject0-debuginfo-0.8-160000.5.1 * libhowl0-0.8-160000.5.1 * avahi-utils-gtk-debuginfo-0.8-160000.5.1 * avahi-debugsource-0.8-160000.5.1 * avahi-compat-mDNSResponder-devel-0.8-160000.5.1 * libavahi-gobject0-0.8-160000.5.1 * avahi-glib2-debugsource-0.8-160000.5.1 * python3-avahi-gtk-0.8-160000.5.1 * libavahi-glib1-debuginfo-0.8-160000.5.1 * libavahi-libevent1-0.8-160000.5.1 * avahi-utils-0.8-160000.5.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * avahi-lang-0.8-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-24401.html * https://www.suse.com/security/cve/CVE-2026-34933.html * https://bugzilla.suse.com/show_bug.cgi?id=1257235 * https://bugzilla.suse.com/show_bug.cgi?id=1261546 . Two vulnerabilities affecting the avahi application on SUSE are fixed in this security update, addressing significant threats.. SUSE Security Update, Avahi Issues, System Crash Resolution, Threat Management. . Severity: moderate. LinuxSecurity.com Team
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.. openSUSE security update: security update for avahi ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21014-1 Rating: moderate References: * bsc#1257235 * bsc#1261546 Cross-References: * CVE-2026-24401 * CVE-2026-34933 CVSS scores: * CVE-2026-24401 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-34933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed. Description: This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the `avahi-daemon` (bsc#1257235). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1026=1 Package List: - openSUSE Leap 16.0: avahi-0.8-160000.5.1 avahi-autoipd-0.8-160000.5.1 avahi-compat-howl-devel-0.8-160000.5.1 avahi-compat-mDNSResponder-devel-0.8-160000.5.1 avahi-lang-0.8-160000.5.1 avahi-utils-0.8-160000.5.1 avahi-utils-gtk-0.8-160000.5.1 libavahi-client3-0.8-160000.5.1 libavahi-common3-0.8-160000.5.1 libavahi-core7-0.8-160000.5.1 libavahi-devel-0.8-160000.5.1 libavahi-glib-devel-0.8-160000.5.1 libavahi-glib1-0.8-160000.5.1 libavahi-gobject-devel-0.8-160000.5.1 libavahi-gobject0-0.8-160000.5.1 libavahi-libevent1-0.8-160000.5.1 libavahi-qt6-1-0.8-160000.5.1 libavahi-qt6-devel-0.8-160000.5.1 libavahi-ui-gtk3-0-0.8-160000.5.1 libdns_sd-0.8-160000.5.1 libhowl0-0.8-160000.5.1 python3-avahi-gtk-0.8-160000.5.1 python313-avahi-0.8-160000.5.1 typelib-1_0-Avahi-0_6-0.8-160000.5.1 References: * https://www.suse.com/security/cve/CVE-2026-24401.html * https://www.suse.com/security/cve/CVE-2026-34933.html . Update for openSUSE addresses two issues in avahi that cause crashes, enhancing overall system stability and reliability.. openSUSE updates, avahi security fix, moderate severity vulnerabilities. . Severity: moderate. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for avahi Announcement ID: SUSE-SU-2026:22258-1 Release Date: 2026-06-22T14:41:38Z Rating: moderate References: * bsc#1257235 * bsc#1261546 Cross-References: * CVE-2026-24401 * CVE-2026-34933 CVSS scores: * CVE-2026-24401 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-24401 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-24401 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-34933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34933 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). * CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the `avahi-daemon` (bsc#1257235). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1026=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-160000.5.1 * libavahi-common3-0.8-160000.5.1 * avahi-0.8-160000.5.1 * avahi-debuginfo-0.8-160000.5.1 * libavahi-client3-debuginfo-0.8-160000.5.1 * libavahi-client3-0.8-160000.5.1 * libavahi-common3-debuginfo-0.8-160000.5.1 * libavahi-core7-debuginfo-0.8-160000.5.1 * libavahi-core7-0.8-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-24401.html * https://www.suse.com/security/cve/CVE-2026-34933.html *https://bugzilla.suse.com/show_bug.cgi?id=1257235 * https://bugzilla.suse.com/show_bug.cgi?id=1261546 . SUSE updates avahi to fix two issues that could crash the daemon, addressing security concerns in the process.. avahi update, suse security, system crash, linux patch, security advisory. . Severity: moderate. LinuxSecurity.com Team
An update that solves two vulnerabilities can now be installed.. # Security update for avahi Announcement ID: SUSE-SU-2026:2311-1 Release Date: 2026-06-09T11:05:49Z Rating: moderate References: * bsc#1257235 * bsc#1261546 Cross-References: * CVE-2026-24401 * CVE-2026-34933 CVSS scores: * CVE-2026-24401 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-24401 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-24401 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-34933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34933 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves two vulnerabilities can now be installed. ## Description: This update for avahi fixes the following issue: * CVE-2026-24401: uncontrolled recursion in `lookup_handle_cname` can crash the `avahi-daemon` (bsc#1257235). * CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2311=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2311=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2311=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2311=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2311=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2311=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * avahi-0.8-150400.7.31.2 * avahi-glib2-debugsource-0.8-150400.7.31.2 * libavahi-glib-devel-0.8-150400.7.31.2 * typelib-1_0-Avahi-0_6-0.8-150400.7.31.2 * avahi-compat-mDNSResponder-devel-0.8-150400.7.31.2 * libavahi-core7-debuginfo-0.8-150400.7.31.2 * libavahi-client3-debuginfo-0.8-150400.7.31.2 * libhowl0-0.8-150400.7.31.2 * python3-avahi-gtk-0.8-150400.7.31.2 * avahi-utils-0.8-150400.7.31.2 * libavahi-libevent1-0.8-150400.7.31.2 * libavahi-gobject-devel-0.8-150400.7.31.2 * libavahi-qt5-1-debuginfo-0.8-150400.7.31.2 * avahi-qt5-debugsource-0.8-150400.7.31.2 * avahi-compat-howl-devel-0.8-150400.7.31.2 * avahi-debugsource-0.8-150400.7.31.2 * libavahi-ui-gtk3-0-debuginfo-0.8-150400.7.31.2 * avahi-autoipd-0.8-150400.7.31.2 * avahi-debuginfo-0.8-150400.7.31.2 * libavahi-common3-0.8-150400.7.31.2 * libavahi-common3-debuginfo-0.8-150400.7.31.2 * libavahi-glib1-debuginfo-0.8-150400.7.31.2 * libhowl0-debuginfo-0.8-150400.7.31.2 * libavahi-ui-gtk3-0-0.8-150400.7.31.2 * libavahi-qt5-devel-0.8-150400.7.31.2 * libdns_sd-0.8-150400.7.31.2 * avahi-utils-gtk-0.8-150400.7.31.2 * libavahi-glib1-0.8-150400.7.31.2 * avahi-utils-gtk-debuginfo-0.8-150400.7.31.2 * libavahi-gobject0-debuginfo-0.8-150400.7.31.2 * avahi-autoipd-debuginfo-0.8-150400.7.31.2 * libavahi-qt5-1-0.8-150400.7.31.2 * libavahi-gobject0-0.8-150400.7.31.2 * libavahi-libevent1-debuginfo-0.8-150400.7.31.2 * python3-avahi-0.8-150400.7.31.2 * libavahi-devel-0.8-150400.7.31.2 * libdns_sd-debuginfo-0.8-150400.7.31.2 * avahi-utils-debuginfo-0.8-150400.7.31.2 * libavahi-client3-0.8-150400.7.31.2 * libavahi-core7-0.8-150400.7.31.2 * openSUSE Leap 15.4 (x86_64) * libavahi-client3-32bit-0.8-150400.7.31.2 * libavahi-client3-32bit-debuginfo-0.8-150400.7.31.2 *libavahi-common3-32bit-0.8-150400.7.31.2 * libdns_sd-32bit-debuginfo-0.8-150400.7.31.2 * avahi-32bit-debuginfo-0.8-150400.7.31.2 * libavahi-glib1-32bit-0.8-150400.7.31.2 * libdns_sd-32bit-0.8-150400.7.31.2 * libavahi-glib1-32bit-debuginfo-0.8-150400.7.31.2 * libavahi-common3-32bit-debuginfo-0.8-150400.7.31.2 * openSUSE Leap 15.4 (noarch) * avahi-lang-0.8-150400.7.31.2 * openSUSE Leap 15.4 (aarch64_ilp32) * avahi-64bit-debuginfo-0.8-150400.7.31.2 * libavahi-client3-64bit-0.8-150400.7.31.2 * libdns_sd-64bit-0.8-150400.7.31.2 * libavahi-glib1-64bit-debuginfo-0.8-150400.7.31.2 * libavahi-client3-64bit-debuginfo-0.8-150400.7.31.2 * libdns_sd-64bit-debuginfo-0.8-150400.7.31.2 * libavahi-common3-64bit-0.8-150400.7.31.2 * libavahi-common3-64bit-debuginfo-0.8-150400.7.31.2 * libavahi-glib1-64bit-0.8-150400.7.31.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * avahi-0.8-150400.7.31.2 * avahi-debugsource-0.8-150400.7.31.2 * libavahi-core7-debuginfo-0.8-150400.7.31.2 * libavahi-client3-debuginfo-0.8-150400.7.31.2 * avahi-debuginfo-0.8-150400.7.31.2 * libavahi-common3-0.8-150400.7.31.2 * libavahi-common3-debuginfo-0.8-150400.7.31.2 * libavahi-client3-0.8-150400.7.31.2 * libavahi-core7-0.8-150400.7.31.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * avahi-0.8-150400.7.31.2 * avahi-debugsource-0.8-150400.7.31.2 * libavahi-core7-debuginfo-0.8-150400.7.31.2 * libavahi-client3-debuginfo-0.8-150400.7.31.2 * avahi-debuginfo-0.8-150400.7.31.2 * libavahi-common3-0.8-150400.7.31.2 * libavahi-common3-debuginfo-0.8-150400.7.31.2 * libavahi-client3-0.8-150400.7.31.2 * libavahi-core7-0.8-150400.7.31.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * avahi-0.8-150400.7.31.2 * avahi-debugsource-0.8-150400.7.31.2 * libavahi-core7-debuginfo-0.8-150400.7.31.2 * libavahi-client3-debuginfo-0.8-150400.7.31.2 *avahi-debuginfo-0.8-150400.7.31.2 * libavahi-common3-0.8-150400.7.31.2 * libavahi-common3-debuginfo-0.8-150400.7.31.2 * libavahi-client3-0.8-150400.7.31.2 * libavahi-core7-0.8-150400.7.31.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * avahi-0.8-150400.7.31.2 * avahi-debugsource-0.8-150400.7.31.2 * libavahi-core7-debuginfo-0.8-150400.7.31.2 * libavahi-client3-debuginfo-0.8-150400.7.31.2 * avahi-debuginfo-0.8-150400.7.31.2 * libavahi-common3-0.8-150400.7.31.2 * libavahi-common3-debuginfo-0.8-150400.7.31.2 * libavahi-client3-0.8-150400.7.31.2 * libavahi-core7-0.8-150400.7.31.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * avahi-0.8-150400.7.31.2 * avahi-debugsource-0.8-150400.7.31.2 * libavahi-core7-debuginfo-0.8-150400.7.31.2 * libavahi-client3-debuginfo-0.8-150400.7.31.2 * avahi-debuginfo-0.8-150400.7.31.2 * libavahi-common3-0.8-150400.7.31.2 * libavahi-common3-debuginfo-0.8-150400.7.31.2 * libavahi-client3-0.8-150400.7.31.2 * libavahi-core7-0.8-150400.7.31.2 ## References: * https://www.suse.com/security/cve/CVE-2026-24401.html * https://www.suse.com/security/cve/CVE-2026-34933.html * https://bugzilla.suse.com/show_bug.cgi?id=1257235 * https://bugzilla.suse.com/show_bug.cgi?id=1261546 . Update resolves two issues in avahi impacting openSUSE with moderate risk. Ensure timely patch installation for safety.. openSUSE security, avahi update, moderate risk resolution, application vulnerabilities. . Severity: moderate. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for avahi Announcement ID: SUSE-SU-2026:2296-1 Release Date: 2026-06-08T10:16:33Z Rating: moderate References: * bsc#1261546 Cross-References: * CVE-2026-34933 CVSS scores: * CVE-2026-34933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34933 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for avahi fixes the following issue: * CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2296=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * avahi-debugsource-0.6.32-32.42.1 * avahi-utils-debuginfo-0.6.32-32.42.1 * libavahi-common3-debuginfo-0.6.32-32.42.1 * avahi-debuginfo-32bit-0.6.32-32.42.1 * avahi-debuginfo-0.6.32-32.42.1 * libdns_sd-debuginfo-32bit-0.6.32-32.42.1 * avahi-utils-0.6.32-32.42.1 * libavahi-core7-debuginfo-0.6.32-32.42.1 * avahi-compat-mDNSResponder-devel-0.6.32-32.42.1 * libdns_sd-32bit-0.6.32-32.42.1 * libavahi-core7-0.6.32-32.42.1 * libdns_sd-debuginfo-0.6.32-32.42.1 * libavahi-devel-0.6.32-32.42.1 * libavahi-client3-32bit-0.6.32-32.42.1 * libavahi-client3-0.6.32-32.42.1 * avahi-compat-howl-devel-0.6.32-32.42.1 * libavahi-common3-32bit-0.6.32-32.42.1 *libavahi-client3-debuginfo-32bit-0.6.32-32.42.1 * libavahi-client3-debuginfo-0.6.32-32.42.1 * libavahi-common3-debuginfo-32bit-0.6.32-32.42.1 * libdns_sd-0.6.32-32.42.1 * libavahi-common3-0.6.32-32.42.1 * avahi-0.6.32-32.42.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * avahi-lang-0.6.32-32.42.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34933.html * https://bugzilla.suse.com/show_bug.cgi?id=1261546 . Update for SUSE resolves moderate issue in avahi, preventing crashes with CVE-2026-34933. Install now for security.. SUSE Linux, Security Update, avahi application, moderate threat, CVE-2026-34933. . Severity: moderate. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for avahi Announcement ID: SUSE-SU-2026:2297-1 Release Date: 2026-06-08T10:17:03Z Rating: moderate References: * bsc#1261546 Cross-References: * CVE-2026-34933 CVSS scores: * CVE-2026-34933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34933 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for avahi fixes the following issue: * CVE-2026-34933: Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags (bsc#1261546). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2297=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2297=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-2297=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2297=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libavahi-gobject-devel-0.8-150600.15.18.1 * libavahi-glib1-debuginfo-0.8-150600.15.18.1 * libhowl0-0.8-150600.15.18.1 * avahi-utils-0.8-150600.15.18.1 * libavahi-devel-0.8-150600.15.18.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.18.1 *python3-avahi-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-0.8-150600.15.18.1 * libavahi-client3-debuginfo-0.8-150600.15.18.1 * libavahi-libevent1-0.8-150600.15.18.1 * libavahi-gobject0-0.8-150600.15.18.1 * avahi-compat-howl-devel-0.8-150600.15.18.1 * avahi-glib2-debugsource-0.8-150600.15.18.1 * avahi-utils-gtk-0.8-150600.15.18.1 * libavahi-libevent1-debuginfo-0.8-150600.15.18.1 * libavahi-qt5-devel-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.18.1 * avahi-utils-debuginfo-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.18.1 * libavahi-core7-0.8-150600.15.18.1 * libavahi-common3-0.8-150600.15.18.1 * python3-avahi-gtk-0.8-150600.15.18.1 * avahi-debugsource-0.8-150600.15.18.1 * libhowl0-debuginfo-0.8-150600.15.18.1 * libavahi-qt5-1-0.8-150600.15.18.1 * libavahi-common3-debuginfo-0.8-150600.15.18.1 * libavahi-gobject0-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-0.8-150600.15.18.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.18.1 * libavahi-core7-debuginfo-0.8-150600.15.18.1 * avahi-qt5-debugsource-0.8-150600.15.18.1 * libavahi-client3-0.8-150600.15.18.1 * libavahi-glib-devel-0.8-150600.15.18.1 * avahi-autoipd-0.8-150600.15.18.1 * libdns_sd-debuginfo-0.8-150600.15.18.1 * libavahi-qt5-1-debuginfo-0.8-150600.15.18.1 * avahi-autoipd-debuginfo-0.8-150600.15.18.1 * avahi-0.8-150600.15.18.1 * libdns_sd-0.8-150600.15.18.1 * openSUSE Leap 15.6 (x86_64) * libavahi-client3-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-32bit-0.8-150600.15.18.1 * libavahi-glib1-32bit-debuginfo-0.8-150600.15.18.1 * avahi-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-client3-32bit-0.8-150600.15.18.1 * libavahi-common3-32bit-0.8-150600.15.18.1 * libdns_sd-32bit-0.8-150600.15.18.1 * libdns_sd-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.18.1 * openSUSE Leap 15.6 (noarch) * avahi-lang-0.8-150600.15.18.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libavahi-client3-64bit-0.8-150600.15.18.1 * libavahi-client3-64bit-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-64bit-debuginfo-0.8-150600.15.18.1 * libdns_sd-64bit-debuginfo-0.8-150600.15.18.1 * libdns_sd-64bit-0.8-150600.15.18.1 * libavahi-common3-64bit-debuginfo-0.8-150600.15.18.1 * avahi-64bit-debuginfo-0.8-150600.15.18.1 * libavahi-common3-64bit-0.8-150600.15.18.1 * libavahi-glib1-64bit-0.8-150600.15.18.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libavahi-glib1-debuginfo-0.8-150600.15.18.1 * libhowl0-0.8-150600.15.18.1 * libavahi-devel-0.8-150600.15.18.1 * avahi-utils-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-0.8-150600.15.18.1 * libavahi-client3-debuginfo-0.8-150600.15.18.1 * libavahi-libevent1-0.8-150600.15.18.1 * libavahi-gobject0-0.8-150600.15.18.1 * avahi-compat-howl-devel-0.8-150600.15.18.1 * avahi-glib2-debugsource-0.8-150600.15.18.1 * libavahi-libevent1-debuginfo-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.18.1 * avahi-utils-debuginfo-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.18.1 * libavahi-core7-0.8-150600.15.18.1 * libavahi-common3-0.8-150600.15.18.1 * avahi-debugsource-0.8-150600.15.18.1 * libhowl0-debuginfo-0.8-150600.15.18.1 * libavahi-common3-debuginfo-0.8-150600.15.18.1 * libavahi-gobject0-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-0.8-150600.15.18.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.18.1 * libavahi-core7-debuginfo-0.8-150600.15.18.1 * libavahi-client3-0.8-150600.15.18.1 * libavahi-glib-devel-0.8-150600.15.18.1 * libdns_sd-debuginfo-0.8-150600.15.18.1 * avahi-0.8-150600.15.18.1 * libdns_sd-0.8-150600.15.18.1 * Basesystem Module 15-SP7 (noarch) * avahi-lang-0.8-150600.15.18.1 * Basesystem Module 15-SP7 (x86_64) *libavahi-client3-32bit-debuginfo-0.8-150600.15.18.1 * avahi-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-client3-32bit-0.8-150600.15.18.1 * libavahi-common3-32bit-0.8-150600.15.18.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.18.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libavahi-gobject-devel-0.8-150600.15.18.1 * avahi-debugsource-0.8-150600.15.18.1 * avahi-glib2-debugsource-0.8-150600.15.18.1 * avahi-utils-gtk-0.8-150600.15.18.1 * avahi-autoipd-0.8-150600.15.18.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 * avahi-autoipd-debuginfo-0.8-150600.15.18.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150600.15.18.1 * python3-avahi-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34933.html * https://bugzilla.suse.com/show_bug.cgi?id=1261546 . An update for avahi addresses a local denial of service issue rated as moderate on openSUSE systems and others.. avahi update, openSUSE security, local denial of service fix, SUSE security advisory, avahi vulnerability. . Severity: Important. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for avahi Announcement ID: SUSE-SU-2026:2297-1 Release Date: 2026-06-08T10:17:03Z Rating: moderate References: * bsc#1261546 Cross-References: * CVE-2026-34933 CVSS scores: * CVE-2026-34933 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34933 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for avahi fixes the following issue: * CVE-2026-34933: Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags (bsc#1261546). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2297=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2297=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-2297=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2297=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libavahi-gobject-devel-0.8-150600.15.18.1 * libavahi-glib1-debuginfo-0.8-150600.15.18.1 * libhowl0-0.8-150600.15.18.1 * avahi-utils-0.8-150600.15.18.1 * libavahi-devel-0.8-150600.15.18.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.18.1 *python3-avahi-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-0.8-150600.15.18.1 * libavahi-client3-debuginfo-0.8-150600.15.18.1 * libavahi-libevent1-0.8-150600.15.18.1 * libavahi-gobject0-0.8-150600.15.18.1 * avahi-compat-howl-devel-0.8-150600.15.18.1 * avahi-glib2-debugsource-0.8-150600.15.18.1 * avahi-utils-gtk-0.8-150600.15.18.1 * libavahi-libevent1-debuginfo-0.8-150600.15.18.1 * libavahi-qt5-devel-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.18.1 * avahi-utils-debuginfo-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.18.1 * libavahi-core7-0.8-150600.15.18.1 * libavahi-common3-0.8-150600.15.18.1 * python3-avahi-gtk-0.8-150600.15.18.1 * avahi-debugsource-0.8-150600.15.18.1 * libhowl0-debuginfo-0.8-150600.15.18.1 * libavahi-qt5-1-0.8-150600.15.18.1 * libavahi-common3-debuginfo-0.8-150600.15.18.1 * libavahi-gobject0-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-0.8-150600.15.18.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.18.1 * libavahi-core7-debuginfo-0.8-150600.15.18.1 * avahi-qt5-debugsource-0.8-150600.15.18.1 * libavahi-client3-0.8-150600.15.18.1 * libavahi-glib-devel-0.8-150600.15.18.1 * avahi-autoipd-0.8-150600.15.18.1 * libdns_sd-debuginfo-0.8-150600.15.18.1 * libavahi-qt5-1-debuginfo-0.8-150600.15.18.1 * avahi-autoipd-debuginfo-0.8-150600.15.18.1 * avahi-0.8-150600.15.18.1 * libdns_sd-0.8-150600.15.18.1 * openSUSE Leap 15.6 (x86_64) * libavahi-client3-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-32bit-0.8-150600.15.18.1 * libavahi-glib1-32bit-debuginfo-0.8-150600.15.18.1 * avahi-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-client3-32bit-0.8-150600.15.18.1 * libavahi-common3-32bit-0.8-150600.15.18.1 * libdns_sd-32bit-0.8-150600.15.18.1 * libdns_sd-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.18.1 * openSUSE Leap 15.6 (noarch) * avahi-lang-0.8-150600.15.18.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libavahi-client3-64bit-0.8-150600.15.18.1 * libavahi-client3-64bit-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-64bit-debuginfo-0.8-150600.15.18.1 * libdns_sd-64bit-debuginfo-0.8-150600.15.18.1 * libdns_sd-64bit-0.8-150600.15.18.1 * libavahi-common3-64bit-debuginfo-0.8-150600.15.18.1 * avahi-64bit-debuginfo-0.8-150600.15.18.1 * libavahi-common3-64bit-0.8-150600.15.18.1 * libavahi-glib1-64bit-0.8-150600.15.18.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libavahi-glib1-debuginfo-0.8-150600.15.18.1 * libhowl0-0.8-150600.15.18.1 * libavahi-devel-0.8-150600.15.18.1 * avahi-utils-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-0.8-150600.15.18.1 * libavahi-client3-debuginfo-0.8-150600.15.18.1 * libavahi-libevent1-0.8-150600.15.18.1 * libavahi-gobject0-0.8-150600.15.18.1 * avahi-compat-howl-devel-0.8-150600.15.18.1 * avahi-glib2-debugsource-0.8-150600.15.18.1 * libavahi-libevent1-debuginfo-0.8-150600.15.18.1 * libavahi-ui-gtk3-0-debuginfo-0.8-150600.15.18.1 * avahi-utils-debuginfo-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 * typelib-1_0-Avahi-0_6-0.8-150600.15.18.1 * libavahi-core7-0.8-150600.15.18.1 * libavahi-common3-0.8-150600.15.18.1 * avahi-debugsource-0.8-150600.15.18.1 * libhowl0-debuginfo-0.8-150600.15.18.1 * libavahi-common3-debuginfo-0.8-150600.15.18.1 * libavahi-gobject0-debuginfo-0.8-150600.15.18.1 * libavahi-glib1-0.8-150600.15.18.1 * avahi-compat-mDNSResponder-devel-0.8-150600.15.18.1 * libavahi-core7-debuginfo-0.8-150600.15.18.1 * libavahi-client3-0.8-150600.15.18.1 * libavahi-glib-devel-0.8-150600.15.18.1 * libdns_sd-debuginfo-0.8-150600.15.18.1 * avahi-0.8-150600.15.18.1 * libdns_sd-0.8-150600.15.18.1 * Basesystem Module 15-SP7 (noarch) * avahi-lang-0.8-150600.15.18.1 * Basesystem Module 15-SP7 (x86_64) *libavahi-client3-32bit-debuginfo-0.8-150600.15.18.1 * avahi-32bit-debuginfo-0.8-150600.15.18.1 * libavahi-client3-32bit-0.8-150600.15.18.1 * libavahi-common3-32bit-0.8-150600.15.18.1 * libavahi-common3-32bit-debuginfo-0.8-150600.15.18.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libavahi-gobject-devel-0.8-150600.15.18.1 * avahi-debugsource-0.8-150600.15.18.1 * avahi-glib2-debugsource-0.8-150600.15.18.1 * avahi-utils-gtk-0.8-150600.15.18.1 * avahi-autoipd-0.8-150600.15.18.1 * avahi-utils-gtk-debuginfo-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 * avahi-autoipd-debuginfo-0.8-150600.15.18.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * avahi-debugsource-0.8-150600.15.18.1 * python3-avahi-0.8-150600.15.18.1 * avahi-debuginfo-0.8-150600.15.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-34933.html * https://bugzilla.suse.com/show_bug.cgi?id=1261546 . Update fixes a moderate issue in avahi leading to possible denial of service by unprivileged users.. SUSE avahi update security moderate CVE-2026-34933. . Severity: moderate. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.