-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Feb 2026 16:54:47 +0100 Source: avahi Architecture: source Version: 0.8-18 Distribution: unstable Urgency: medium Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Michael Biebl <biebl@debian.org> Closes: 1088111 1125417 1125418 1125419 1126342 Changes: avahi (0.8-18) unstable; urgency=medium . [ Simon McVittie ] * d/copyright: Don't quote the FSF's former postal address here . [ Michael Biebl ] * core: refuse to create wide-area record browsers when wide-area is off. Patch cherry-picked from upstream Git CVE-2025-68276 (Closes: #1125417) * core: fix DoS bug by removing incorrect assertion. Patch cherry-picked from upstream Git CVE-2025-68468 (Closes: #1125418) * core: fix DoS bug by changing assert to return. Patch cherry-picked from upstream Git CVE-2025-68471 (Closes: #1125419) * core: fix uncontrolled recursion bug using a simple loop detection algorithm. Patch cherry-picked from upstream Git CVE-2026-24401 (Closes: #1126342) * Randomize transaction IDs in wide area queries. Patch cherry-picked from upstream Git. CVE-2024-52616 (Closes: #1088111) * Bump Standards-Version to 4.7.3 Checksums-Sha1: 2c9cbe1edc6d2680d309931a1e3bbbe1a23840cf 4239 avahi_0.8-18.dsc a197533bf4e85da80fa791a6e279c999512d563e 56900 avahi_0.8-18.debian.tar.xz 9eab43ced56124567ebdbdc95fce556ff371db1e 6165 avahi_0.8-18_source.buildinfo Checksums-Sha256: 6afec72b7c375af1a45dbd1a1d1b8ce7b6cddb2d4fbf195343c8eb392b4b869d 4239 avahi_0.8-18.dsc c86a48343533c75ae57e1f66818f9f9a2bb311394188c36f6719c7240d1e7109 56900 avahi_0.8-18.debian.tar.xz 67a1f60e8fc6876da4f7b58ffe29be699c92234813c71bfcc810b55d2eb57199 6165 avahi_0.8-18_source.buildinfo Files: 82f3b4cad9491f5da06c5b119ecf416a 4239 net optional avahi_0.8-18.dsc 31b87fe663951a7a20385e98bfa75e25 56900 net optional avahi_0.8-18.debian.tar.xz 5a1a0db01540657ce71f63561af79249 6165 net optional avahi_0.8-18_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAml/gMUACgkQauHfDWCP ItxcbxAAiz7FKpRtkPzCmA0AkiRTZhAPmjMeoRtFdhDKGKjd/86zpHfmE6TDPIvD QGSxWrCutKAqqyyazBgX6boGvhyuNMXsMLhun8prd/S+cE0B2KjjUg6NBvg66k4Y ghX1XrwGBcFK523VkH4BGyyRkYvFeaba2F1w/ielxPbzk2LLD1+1bnGYRG8kPrLQ nl5KOb5TvwgdiRBkS3MfwGea4tVENy5o4Lg4u+iG6It5KhF49wVXPyZdybI8BBIx 0mnELLHfNZwyYhkfCO9KB+D8M6blyX1k22vf6637nc0EQ0BSZlYdHxHyEE+fI5q2 XHN+L6rYIe+PQI96ft61HRgWBPaBlEJr1MBzx7Z/KLhqMwNWq6GivLPz/gkZ5Hf7 bo8sgXzKQc1M2czdf8UBs4UZdYieQGoZvI9EfRO3Ijx1/vqIqFF5wySLzDworgui 76QucBn8+UjY8uL62RxrPuFhlXJPQXxiBwy9kg1n4MIXLlhAO8blKvQV7tsjimtN HPvUm9KlTUS+oSzrT87my1GzUCs8wL/p/05rSR/UBjp8BX/ggMdu0HXOf0S7PGgK iVfC/wOmjX8yHBitg/HeUnKuo4zXZMEsWgI7ayd9wgCBe9+JSViNcGcSoYgb6qGZ DMtCSQezOBz3XwLKFtXp6l9qiEXCtC0B2VE88SEGrzIJ1PWKv1Q= =gFln -----END PGP SIGNATURE-----
