[Git][security-tracker-team/security-tracker][master] Add new avahi issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b85eed8c by Salvatore Bonaccorso at 2026-01-12T21:49:11+01:00
Add new avahi issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43,11 +43,20 @@ CVE-2025-68622 (Espressif ESP-IDF USB Host UVC Class Driver allows video streami
 CVE-2025-68472 (MindsDB is a platform for building artificial intelligence from enterp ...)
 	NOT-FOR-US: MindsDB
 CVE-2025-68471 (Avahi is a system which facilitates service discovery on a local netwo ...)
-	TODO: check
+	- avahi <unfixed>
+	NOTE: https://github.com/avahi/avahi/security/advisories/GHSA-56rf-42xr-qmmg
+	NOTE: https://github.com/avahi/avahi/issues/678
+	NOTE: Fixed by: https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1
 CVE-2025-68468 (Avahi is a system which facilitates service discovery on a local netwo ...)
-	TODO: check
+	- avahi <unfixed>
+	NOTE: https://github.com/avahi/avahi/security/advisories/GHSA-cp79-r4x9-vf52
+	NOTE: https://github.com/avahi/avahi/issues/683
+	NOTE: Fixed by: https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a
 CVE-2025-68276 (Avahi is a system which facilitates service discovery on a local netwo ...)
-	TODO: check
+	- avahi <unfixed>
+	NOTE: https://github.com/avahi/avahi/security/advisories/GHSA-mhf3-865v-g5rc
+	NOTE: https://github.com/avahi/avahi/pull/806
+	NOTE: Fixed by: https://github.com/avahi/avahi/commit/2d48e42d44a183f26a4d12d1f5d41abb9b7c6355
 CVE-2025-67813 (Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions o ...)
 	TODO: check
 CVE-2025-66939 (Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b85eed8c6fbdfdd5e715e72f19d5aa51c761d848

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b85eed8c6fbdfdd5e715e72f19d5aa51c761d848
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260112/96b4b89c/attachment.htm>