File _patchinfo of Package patchinfo.18184

<patchinfo incident="18184">
  <issue tracker="bnc" id="1180827">VUL-0: CVE-2021-26720: EMBARGOED: avahi: outdated and insecure if-up script avahi-daemon-check-dns.sh</issue>
  <issue tracker="cve" id="2021-26720"/>
  <packager>mgorse</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for avahi</summary>
  <description>This update for avahi fixes the following issues:

- CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh (bsc#1180827)
- Update avahi-daemon-check-dns.sh from Debian. Our previous version relied on ifconfig, route, and init.d.
- Add sudo to requires: used to drop privileges.
</description>
</patchinfo>