RHSA-2026:11316MediumCVSS 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
April 28, 2026
Last Modified
September 6, 2026

🔗 CVE IDs covered (5)

CVE-2026-24401 →CVE-2026-34933 →CVE-2025-68276 →CVE-2025-68468 →CVE-2025-68471 →

📋 Description

CVE-2025-68276 — avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag CVE-2025-68468 — avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements CVE-2025-68471 — avahi: Avahi: Denial of Service via unsolicited CNAME announcements CVE-2026-24401 — avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response CVE-2026-34933 — avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

🎯 Affected products4

  • Red Hat Hardened Images
  • avahi-main@aarch64 as a component of Red Hat Hardened Images
  • avahi-main@src as a component of Red Hat Hardened Images
  • avahi-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this issue, disable the avahi-daemon service if mDNS/DNS-SD functionality is not required on the system. ```bash sudo systemctl disable --now avahi-daemon.service sudo systemctl mask avahi-daemon.service ``` Disabling this service may impact applications relying on mDNS for local network service discovery. A system reboot or service reload may be required for the changes to take full effect.

🔗 References (9)