Back Linuxsecurity

openSUSE Releases Advisory 2026:20013-1 for CVE-2024

Linuxsecurity •LinuxSecurity Advisories • January 13, 2026

This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing (bsc#1233421) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-127=1

- openSUSE Leap 16.0: avahi-0.8-160000.3.1 avahi-autoipd-0.8-160000.3.1 avahi-compat-howl-devel-0.8-160000.3.1 avahi-compat-mDNSResponder-devel-0.8-160000.3.1 avahi-lang-0.8-160000.3.1 avahi-utils-0.8-160000.3.1 avahi-utils-gtk-0.8-160000.3.1 libavahi-client3-0.8-160000.3.1 libavahi-common3-0.8-160000.3.1 libavahi-core7-0.8-160000.3.1 libavahi-devel-0.8-160000.3.1 libavahi-glib-devel-0.8-160000.3.1 libavahi-glib1-0.8-160000.3.1 libavahi-gobject-devel-0.8-160000.3.1 libavahi-gobject0-0.8-160000.3.1 libavahi-libevent1-0.8-160000.3.1 libavahi-qt6-1-0.8-160000.3.1 libavahi-qt6-devel-0.8-160000.3.1 libavahi-ui-gtk3-0-0.8-160000.3.1 libdns_sd-0.8-160000.3.1 libhowl0-0.8-160000.3.1 python3-avahi-gtk-0.8-160000.3.1 python313-avahi-0.8-160000.3.1 typelib-1_0-Avahi-0_6-0.8-160000.3.1

- openSUSE Leap 16.0:

avahi-autoipd-0.8-160000.3.1

avahi-compat-howl-devel-0.8-160000.3.1

avahi-compat-mDNSResponder-devel-0.8-160000.3.1

avahi-lang-0.8-160000.3.1

avahi-utils-0.8-160000.3.1

avahi-utils-gtk-0.8-160000.3.1

libavahi-client3-0.8-160000.3.1

libavahi-common3-0.8-160000.3.1

libavahi-core7-0.8-160000.3.1

libavahi-devel-0.8-160000.3.1

libavahi-glib-devel-0.8-160000.3.1

libavahi-glib1-0.8-160000.3.1

libavahi-gobject-devel-0.8-160000.3.1

libavahi-gobject0-0.8-160000.3.1

libavahi-libevent1-0.8-160000.3.1

libavahi-qt6-1-0.8-160000.3.1

libavahi-qt6-devel-0.8-160000.3.1

libavahi-ui-gtk3-0-0.8-160000.3.1

libdns_sd-0.8-160000.3.1

libhowl0-0.8-160000.3.1

python3-avahi-gtk-0.8-160000.3.1

python313-avahi-0.8-160000.3.1

typelib-1_0-Avahi-0_6-0.8-160000.3.1

* bsc#1233421 References: *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE and openSUSE Address DNS Spoofing Vulnerability in Avahi SUSE and openSUSE have released updates to address a moderate DNS spoofing vulnerability identified as CVE-2024-52615 affecting the Avahi service. The vulnerability allows for potential DNS spoofing attacks, and users are advised to apply the patches using the recommended installation methods. The updates are applicable to SUSE Linux Enterprise Server 16.0 and openSUSE Leap 16.0. 2 sources 25

Extracted Entities

CVEs (1)

CVE-2024-52615

Platforms (1)

OpenSUSE Leap 16.0