[Git][security-tracker-team/security-tracker][master] Track fixed version for some avahi issues fixed via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f63a4070 by Salvatore Bonaccorso at 2026-02-01T17:52:20+01:00
Track fixed version for some avahi issues fixed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2179,7 +2179,7 @@ CVE-2026-24403 (iccDEV provides libraries and tools for interacting with, manipu
 CVE-2026-24402
 	REJECTED
 CVE-2026-24401 (Avahi is a system which facilitates service discovery on a local netwo ...)
-	- avahi <unfixed> (bug #1126342)
+	- avahi 0.8-18 (bug #1126342)
 	[trixie] - avahi <no-dsa> (Minor issue)
 	[bookworm] - avahi <no-dsa> (Minor issue)
 	[bullseye] - avahi <postponed> (Minor issue, DoS)
@@ -7984,7 +7984,7 @@ CVE-2025-68622 (Espressif ESP-IDF USB Host UVC Class Driver allows video streami
 CVE-2025-68472 (MindsDB is a platform for building artificial intelligence from enterp ...)
 	NOT-FOR-US: MindsDB
 CVE-2025-68471 (Avahi is a system which facilitates service discovery on a local netwo ...)
-	- avahi <unfixed> (bug #1125419)
+	- avahi 0.8-18 (bug #1125419)
 	[trixie] - avahi <no-dsa> (Minor issue)
 	[bookworm] - avahi <no-dsa> (Minor issue)
 	[bullseye] - avahi <postponed> (Minor issue, clean/assertion crash, revisit when 0.9 is released and packaged)
@@ -7992,7 +7992,7 @@ CVE-2025-68471 (Avahi is a system which facilitates service discovery on a local
 	NOTE: https://github.com/avahi/avahi/issues/678
 	NOTE: Fixed by: https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1
 CVE-2025-68468 (Avahi is a system which facilitates service discovery on a local netwo ...)
-	- avahi <unfixed> (bug #1125418)
+	- avahi 0.8-18 (bug #1125418)
 	[trixie] - avahi <no-dsa> (Minor issue)
 	[bookworm] - avahi <no-dsa> (Minor issue)
 	[bullseye] - avahi <postponed> (Minor issue, clean/assertion crash, revisit when 0.9 is released and packaged)
@@ -8000,7 +8000,7 @@ CVE-2025-68468 (Avahi is a system which facilitates service discovery on a local
 	NOTE: https://github.com/avahi/avahi/issues/683
 	NOTE: Fixed by: https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a
 CVE-2025-68276 (Avahi is a system which facilitates service discovery on a local netwo ...)
-	- avahi <unfixed> (bug #1125417)
+	- avahi 0.8-18 (bug #1125417)
 	[trixie] - avahi <no-dsa> (Minor issue)
 	[bookworm] - avahi <no-dsa> (Minor issue)
 	[bullseye] - avahi <postponed> (Minor issue, clean/assertion crash, revisit when 0.9 is released and packaged)
@@ -148844,7 +148844,7 @@ CVE-2024-47208 (Server-Side Request Forgery (SSRF), Improper Control of Generati
 CVE-2024-48962 (Improper Control of Generation of Code ('Code Injection'), Cross-Site  ...)
 	NOT-FOR-US: Apache OFBiz
 CVE-2024-52616 (A flaw was found in the Avahi-daemon, where it initializes DNS transac ...)
-	- avahi <unfixed> (bug #1088111)
+	- avahi 0.8-18 (bug #1088111)
 	[trixie] - avahi <no-dsa> (Minor issue; workarounds/mitigation exist by setting enable-wide-area=no)
 	[bookworm] - avahi <no-dsa> (Minor issue; workarounds/mitigation exist by setting enable-wide-area=no)
 	[bullseye] - avahi <postponed> (Minor issue; workarounds/mitigation exist by setting enable-wide-area=no)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f63a40708c0b9c05e5b39390030434d443ac6838

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f63a40708c0b9c05e5b39390030434d443ac6838
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260201/7e46113f/attachment.htm>