Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
This update includes the following RPMs: avahi: * avahi-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-autoipd-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-howl-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-howl-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-libdns_sd-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-libdns_sd-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-dnsconfd-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-glib-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-glib-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-gobject-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-gobject-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-libs-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt3-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt3-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt4-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt4-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt5-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt5-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-sharp-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-tools-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-gtk3-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-sharp-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-sharp-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-tools-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-0.9~rc4-0.1.hum1.src (src) Security Fix(es): avahi: * CVE-2025-68276 * CVE-2025-68468 * CVE-2025-68471 * CVE-2026-24401 * CVE-2026-34933
AI Analysis
Technical Summary
The advisory covers security fixes for several CVEs affecting Avahi components in Red Hat Hardened Images. Specifically, CVE-2025-68276 is a denial of service vulnerability where an unprivileged local user can crash the avahi-daemon by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus, triggering an assertion failure (CWE-617). The advisory lists multiple updated RPMs for Avahi on aarch64 and x86_64 architectures. The vendor advisory does not explicitly state fixed versions or patch availability but references updated RPMs and directs users to apply the update. No known exploits in the wild have been reported for these vulnerabilities.
Potential Impact
Successful exploitation of CVE-2025-68276 results in a denial of service by crashing the avahi-daemon, making the service unavailable. This impacts availability but does not affect confidentiality or integrity. The vulnerabilities affect local unprivileged users. No known active exploitation has been reported.
Mitigation Recommendations
The vendor advisory indicates that updated RPM packages for Avahi components are available and should be applied to remediate the vulnerabilities. Users should follow Red Hat's instructions for applying these updates. No additional mitigations or workarounds are specified. Patch status is not explicitly confirmed in the advisory text; users should verify the update availability via Red Hat's official channels.
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Description
This update includes the following RPMs: avahi: * avahi-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-autoipd-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-howl-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-howl-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-libdns_sd-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-compat-libdns_sd-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-dnsconfd-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-glib-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-glib-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-gobject-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-gobject-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-libs-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt3-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt3-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt4-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt4-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt5-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-qt5-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-sharp-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-tools-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-gtk3-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-sharp-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-sharp-devel-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-ui-tools-0.9~rc4-0.1.hum1 (aarch64, x86_64) * avahi-0.9~rc4-0.1.hum1.src (src) Security Fix(es): avahi: * CVE-2025-68276 * CVE-2025-68468 * CVE-2025-68471 * CVE-2026-24401 * CVE-2026-34933
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory covers security fixes for several CVEs affecting Avahi components in Red Hat Hardened Images. Specifically, CVE-2025-68276 is a denial of service vulnerability where an unprivileged local user can crash the avahi-daemon by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus, triggering an assertion failure (CWE-617). The advisory lists multiple updated RPMs for Avahi on aarch64 and x86_64 architectures. The vendor advisory does not explicitly state fixed versions or patch availability but references updated RPMs and directs users to apply the update. No known exploits in the wild have been reported for these vulnerabilities.
Potential Impact
Successful exploitation of CVE-2025-68276 results in a denial of service by crashing the avahi-daemon, making the service unavailable. This impacts availability but does not affect confidentiality or integrity. The vulnerabilities affect local unprivileged users. No known active exploitation has been reported.
Mitigation Recommendations
The vendor advisory indicates that updated RPM packages for Avahi components are available and should be applied to remediate the vulnerabilities. Users should follow Red Hat's instructions for applying these updates. No additional mitigations or workarounds are specified. Patch status is not explicitly confirmed in the advisory text; users should verify the update availability via Red Hat's official channels.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:11316
- Cve Count
- 5
- Additional Cves
- ["CVE-2025-68468","CVE-2025-68471","CVE-2026-24401","CVE-2026-34933"]
Threat ID: 6a4049d127e9c7971982b8de
Added to database: 06/27/2026, 22:08:17 UTC
Last enriched: 08/16/2026, 17:54:16 UTC
Last updated: 09/13/2026, 22:01:30 UTC
Views: 41
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.