SUSE-SU-2026:1441-1

Опубликовано: 17 апр. 2026

Источник: suse-cvrf

Описание

Security update for avahi

This update for avahi fixes the following issue:

CVE-2026-24401: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record (bsc#1257235).

Список пакетов

Container suse/kiosk/firefox-esr:latest

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Container suse/manager/5.0/x86_64/server:latest

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Container suse/samba-client:latest

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Container suse/samba-server:latest

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Container suse/samba-toolbox:latest

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-Azure-3P

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-Azure-Basic

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-Azure-Standard

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-BYOS

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-CHOST-BYOS

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-CHOST-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-CHOST-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-CHOST-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-CHOST-BYOS-GDC

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-EC2-ECS-HVM

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC-BYOS

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-HPC-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-Hardened-BYOS

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-Hardened-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-Hardened-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-Hardened-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Azure-3P

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-BYOS

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened-BYOS

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAP-Hardened-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAPCAL

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAPCAL-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAPCAL-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP6-SAPCAL-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-Azure-3P

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-Azure-Basic

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-Azure-Standard

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-CHOST-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-CHOST-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-CHOST-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-CHOST-BYOS-GDC

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-EC2-ECS-HVM

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-GCE-3P

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-HPC-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-HPC-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-HPC-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-HPC-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-Hardened-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-Hardened-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-Hardened-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-Azure-3P

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-GCE-3P

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-Hardened-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAP-Hardened-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAPCAL-Azure

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAPCAL-EC2

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image SLES15-SP7-SAPCAL-GCE

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

Image server-image-sles15sp7

libavahi-client3-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

avahi-0.8-150600.15.15.1

avahi-compat-howl-devel-0.8-150600.15.15.1

avahi-compat-mDNSResponder-devel-0.8-150600.15.15.1

avahi-lang-0.8-150600.15.15.1

avahi-utils-0.8-150600.15.15.1

libavahi-client3-0.8-150600.15.15.1

libavahi-client3-32bit-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

libavahi-common3-32bit-0.8-150600.15.15.1

libavahi-core7-0.8-150600.15.15.1

libavahi-devel-0.8-150600.15.15.1

libavahi-glib-devel-0.8-150600.15.15.1

libavahi-glib1-0.8-150600.15.15.1

libavahi-gobject0-0.8-150600.15.15.1

libavahi-libevent1-0.8-150600.15.15.1

libavahi-ui-gtk3-0-0.8-150600.15.15.1

libdns_sd-0.8-150600.15.15.1

libhowl0-0.8-150600.15.15.1

typelib-1_0-Avahi-0_6-0.8-150600.15.15.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

avahi-autoipd-0.8-150600.15.15.1

avahi-utils-gtk-0.8-150600.15.15.1

libavahi-gobject-devel-0.8-150600.15.15.1

SUSE Linux Enterprise Module for Package Hub 15 SP7

python3-avahi-0.8-150600.15.15.1

openSUSE Leap 15.6

avahi-0.8-150600.15.15.1

avahi-autoipd-0.8-150600.15.15.1

avahi-compat-howl-devel-0.8-150600.15.15.1

avahi-compat-mDNSResponder-devel-0.8-150600.15.15.1

avahi-lang-0.8-150600.15.15.1

avahi-utils-0.8-150600.15.15.1

avahi-utils-gtk-0.8-150600.15.15.1

libavahi-client3-0.8-150600.15.15.1

libavahi-client3-32bit-0.8-150600.15.15.1

libavahi-common3-0.8-150600.15.15.1

libavahi-common3-32bit-0.8-150600.15.15.1

libavahi-core7-0.8-150600.15.15.1

libavahi-devel-0.8-150600.15.15.1

libavahi-glib-devel-0.8-150600.15.15.1

libavahi-glib1-0.8-150600.15.15.1

libavahi-glib1-32bit-0.8-150600.15.15.1

libavahi-gobject-devel-0.8-150600.15.15.1

libavahi-gobject0-0.8-150600.15.15.1

libavahi-libevent1-0.8-150600.15.15.1

libavahi-qt5-1-0.8-150600.15.15.1

libavahi-qt5-devel-0.8-150600.15.15.1

libavahi-ui-gtk3-0-0.8-150600.15.15.1

libdns_sd-0.8-150600.15.15.1

libdns_sd-32bit-0.8-150600.15.15.1

libhowl0-0.8-150600.15.15.1

python3-avahi-0.8-150600.15.15.1

python3-avahi-gtk-0.8-150600.15.15.1

typelib-1_0-Avahi-0_6-0.8-150600.15.15.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261441-1/
Link for SUSE-SU-2026:1441-1
https://lists.suse.com/pipermail/sle-updates/2026-April/045676.html
E-Mail link for SUSE-SU-2026:1441-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1257235
SUSE Bug 1257235
https://www.suse.com/security/cve/CVE-2026-24401/
SUSE CVE CVE-2026-24401 page

Описание

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., "h.local" as a CNAME for "h.local"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.

Затронутые продукты

Container suse/kiosk/firefox-esr:latest:libavahi-client3-0.8-150600.15.15.1

Container suse/kiosk/firefox-esr:latest:libavahi-common3-0.8-150600.15.15.1

Container suse/manager/5.0/x86_64/server:latest:libavahi-client3-0.8-150600.15.15.1

Container suse/manager/5.0/x86_64/server:latest:libavahi-common3-0.8-150600.15.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-24401.html
CVE-2026-24401
https://bugzilla.suse.com/1257235
SUSE Bug 1257235