Back Linuxsecurity

High Exploit Risk Identified in Ubuntu 20.04 PackageSolution Vulnerability

Linuxsecurity •LinuxSecurity Advisories • January 27, 2026

This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug by removing incorrect assertion (bsc#1256499) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-193=1

- openSUSE Leap 16.0: avahi-0.8-160000.4.1 avahi-autoipd-0.8-160000.4.1 avahi-compat-howl-devel-0.8-160000.4.1 avahi-compat-mDNSResponder-devel-0.8-160000.4.1 avahi-lang-0.8-160000.4.1 avahi-utils-0.8-160000.4.1 avahi-utils-gtk-0.8-160000.4.1 libavahi-client3-0.8-160000.4.1 libavahi-common3-0.8-160000.4.1 libavahi-core7-0.8-160000.4.1 libavahi-devel-0.8-160000.4.1 libavahi-glib-devel-0.8-160000.4.1 libavahi-glib1-0.8-160000.4.1 libavahi-gobject-devel-0.8-160000.4.1 libavahi-gobject0-0.8-160000.4.1 libavahi-libevent1-0.8-160000.4.1 libavahi-qt6-1-0.8-160000.4.1 libavahi-qt6-devel-0.8-160000.4.1 libavahi-ui-gtk3-0-0.8-160000.4.1 libdns_sd-0.8-160000.4.1 libhowl0-0.8-160000.4.1 python3-avahi-gtk-0.8-160000.4.1 python313-avahi-0.8-160000.4.1 typelib-1_0-Avahi-0_6-0.8-160000.4.1

- openSUSE Leap 16.0:

avahi-autoipd-0.8-160000.4.1

avahi-compat-howl-devel-0.8-160000.4.1

avahi-compat-mDNSResponder-devel-0.8-160000.4.1

avahi-lang-0.8-160000.4.1

avahi-utils-0.8-160000.4.1

avahi-utils-gtk-0.8-160000.4.1

libavahi-client3-0.8-160000.4.1

libavahi-common3-0.8-160000.4.1

libavahi-core7-0.8-160000.4.1

libavahi-devel-0.8-160000.4.1

libavahi-glib-devel-0.8-160000.4.1

libavahi-glib1-0.8-160000.4.1

libavahi-gobject-devel-0.8-160000.4.1

libavahi-gobject0-0.8-160000.4.1

libavahi-libevent1-0.8-160000.4.1

libavahi-qt6-1-0.8-160000.4.1

libavahi-qt6-devel-0.8-160000.4.1

libavahi-ui-gtk3-0-0.8-160000.4.1

libdns_sd-0.8-160000.4.1

libhowl0-0.8-160000.4.1

python3-avahi-gtk-0.8-160000.4.1

python313-avahi-0.8-160000.4.1

typelib-1_0-Avahi-0_6-0.8-160000.4.1

* bsc#1256498 * bsc#1256499 * bsc#1256500 References: * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High Exploit Risk in Ubuntu 20.04 Package Due to Vulnerabilities Multiple vulnerabilities have been identified in the avahi package of Ubuntu 20.04, including CVE-2025-68276, CVE-2025-68471, and CVE-2025-68468. These vulnerabilities could lead to denial of service (DoS) attacks and other issues. Users are advised to apply the security updates using recommended installation methods. 1 sources 18

Extracted Entities

High Exploit Risk Identified in Ubuntu 20.04 PackageSolution Vulnerability

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CVEs (3)