File _patchinfo of Package patchinfo.42227
<patchinfo incident="42227"> <issue tracker="cve" id="2025-68276"/> <issue tracker="cve" id="2025-68468"/> <issue tracker="cve" id="2025-68471"/> <issue tracker="bnc" id="1256499">VUL-0: CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lead to crash of avahi-daemon</issue> <issue tracker="bnc" id="1256500">VUL-0: CVE-2025-68471: avahi: reachable assertion in `lookup_start` can lead to crash of avahi-daemon</issue> <issue tracker="bnc" id="1256498">VUL-0: CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon</issue> <packager>qzhao</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for avahi</summary> <description>This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499) </description> </patchinfo>