Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f63a4070 by Salvatore Bonaccorso at 2026-02-01T17:52:20+01:00
Track fixed version for some avahi issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2179,7 +2179,7 @@ CVE-2026-24403 (iccDEV provides libraries and tools for
interacting with, manipu
CVE-2026-24402
REJECTED
CVE-2026-24401 (Avahi is a system which facilitates service discovery on a
local netwo ...)
- - avahi <unfixed> (bug #1126342)
+ - avahi 0.8-18 (bug #1126342)
[trixie] - avahi <no-dsa> (Minor issue)
[bookworm] - avahi <no-dsa> (Minor issue)
[bullseye] - avahi <postponed> (Minor issue, DoS)
@@ -7984,7 +7984,7 @@ CVE-2025-68622 (Espressif ESP-IDF USB Host UVC Class
Driver allows video streami
CVE-2025-68472 (MindsDB is a platform for building artificial intelligence
from enterp ...)
NOT-FOR-US: MindsDB
CVE-2025-68471 (Avahi is a system which facilitates service discovery on a
local netwo ...)
- - avahi <unfixed> (bug #1125419)
+ - avahi 0.8-18 (bug #1125419)
[trixie] - avahi <no-dsa> (Minor issue)
[bookworm] - avahi <no-dsa> (Minor issue)
[bullseye] - avahi <postponed> (Minor issue, clean/assertion crash,
revisit when 0.9 is released and packaged)
@@ -7992,7 +7992,7 @@ CVE-2025-68471 (Avahi is a system which facilitates
service discovery on a local
NOTE: https://github.com/avahi/avahi/issues/678
NOTE: Fixed by:
https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1
CVE-2025-68468 (Avahi is a system which facilitates service discovery on a
local netwo ...)
- - avahi <unfixed> (bug #1125418)
+ - avahi 0.8-18 (bug #1125418)
[trixie] - avahi <no-dsa> (Minor issue)
[bookworm] - avahi <no-dsa> (Minor issue)
[bullseye] - avahi <postponed> (Minor issue, clean/assertion crash,
revisit when 0.9 is released and packaged)
@@ -8000,7 +8000,7 @@ CVE-2025-68468 (Avahi is a system which facilitates
service discovery on a local
NOTE: https://github.com/avahi/avahi/issues/683
NOTE: Fixed by:
https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a
CVE-2025-68276 (Avahi is a system which facilitates service discovery on a
local netwo ...)
- - avahi <unfixed> (bug #1125417)
+ - avahi 0.8-18 (bug #1125417)
[trixie] - avahi <no-dsa> (Minor issue)
[bookworm] - avahi <no-dsa> (Minor issue)
[bullseye] - avahi <postponed> (Minor issue, clean/assertion crash,
revisit when 0.9 is released and packaged)
@@ -148844,7 +148844,7 @@ CVE-2024-47208 (Server-Side Request Forgery (SSRF),
Improper Control of Generati
CVE-2024-48962 (Improper Control of Generation of Code ('Code Injection'),
Cross-Site ...)
NOT-FOR-US: Apache OFBiz
CVE-2024-52616 (A flaw was found in the Avahi-daemon, where it initializes DNS
transac ...)
- - avahi <unfixed> (bug #1088111)
+ - avahi 0.8-18 (bug #1088111)
[trixie] - avahi <no-dsa> (Minor issue; workarounds/mitigation exist by
setting enable-wide-area=no)
[bookworm] - avahi <no-dsa> (Minor issue; workarounds/mitigation exist
by setting enable-wide-area=no)
[bullseye] - avahi <postponed> (Minor issue; workarounds/mitigation
exist by setting enable-wide-area=no)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f63a40708c0b9c05e5b39390030434d443ac6838
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f63a40708c0b9c05e5b39390030434d443ac6838
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
