Thomas Perale 88f3b8366b package/avahi: upstream patch for CVE-2026-34933 ...

This fixes the following vulnerability:

- CVE-2026-34933:
    Avahi is a system which facilitates service discovery on a local
    network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4,
    any unprivileged local user can crash avahi-daemon by sending a single
    D-Bus method call with conflicting publish flags. This issue has been
    patched in version 0.9-rc4.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2026-34933
  - 0be89b6bb5

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>

2026-07-05 11:34:30 +02:00

..

0001-Fix-NULL-pointer-crashes-from-175.patch

…

0002-remove-imp-from-py-compile.patch

…

0003-avoid-infinite-loop-in-avahi-daemon-by-handling-hup-event-in-client-work.patch

…

0004-core-reject-overly-long-txt-resource-records.patch

…

0005-ensure-each-label-is-at-least-one-byte-long.patch

…

0006-common-bail-out-when-escaped-labels-can-t-fit-into-ret.patch

…

0007-core-extract-host-name-using-avahi-unescape-label.patch

…

0008-core-return-errors-from-avahi-server-set-host-name-properly.patch

…

0009-core-make-sure-there-is-rdata-to-process-before-parsing-it.patch

…

0010-common-derive-alternative-host-name-from-its-unescaped-version.patch

…

0011-properly-randomize-query-id-of-DNS-packets.patch

…

0012-core-wide-area-fix-for-CVE-2024-52615.patch

…

0013-core-refuse-to-create-wide-area-record-browsers-when-wide-area-is-off.patch

…

0014-core-fix-DoS-bug-by-removing-incorrect-assertion.patch

…

0015-core-fix-DoS-bug-by-changing-assert-to-return.patch

…

0016-core-fix-uncontrolled-recursion-bug-using-a-simple-loop-detection-algorithm.patch

…

0017-core-refuse-to-accept-publish-flags-where-both-wide-area-and-multicast-are-set.patch

…

avahi_sysusers.conf

…

avahi_tmpfiles.conf

…

avahi.hash

…

avahi.mk

…

Config.in

…

S05avahi-setup.sh

…

S50avahi-daemon

…