Ubuntu Security Update USN-7967-1: Avahi vulnerabilities

[LinuxBot]

It was discovered that Avahi incorrectly terminated when processing browser records with wide-area disabled. An attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276) It was discovered that Avahi incorrectly terminated when processing unsolicited CNAME records pointing to resource records with short TTLs. An attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68468) It was discovered that Avahi incorrectly terminated when processing unsolicited CNAME records in quick succession. An attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68471)

Continue reading...