SUSE-SU-2026:1442-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20261442-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1442-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1442-1
- Upstream
- Related
- Published
- 2026-04-17T14:19:07Z
- Modified
- 2026-04-18T08:01:29Z
- Summary
- Security update for avahi
- Details
-
This update for avahi fixes the following issue:
- CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).
- References
Affected packages
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / avahi
Package
- Name
- avahi
- Purl
- pkg:rpm/suse/avahi&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed0.6.32-32.39.1
Ecosystem specific
{
"binaries": [
{
"avahi": "0.6.32-32.39.1",
"avahi-compat-howl-devel": "0.6.32-32.39.1",
"avahi-compat-mDNSResponder-devel": "0.6.32-32.39.1",
"avahi-lang": "0.6.32-32.39.1",
"avahi-utils": "0.6.32-32.39.1",
"libavahi-client3": "0.6.32-32.39.1",
"libavahi-client3-32bit": "0.6.32-32.39.1",
"libavahi-common3": "0.6.32-32.39.1",
"libavahi-common3-32bit": "0.6.32-32.39.1",
"libavahi-core7": "0.6.32-32.39.1",
"libavahi-devel": "0.6.32-32.39.1",
"libdns_sd": "0.6.32-32.39.1",
"libdns_sd-32bit": "0.6.32-32.39.1"
}
]
}