shield Security update for python-zeroconf

openSUSE-2026-218

This update for python-zeroconf fixes the following issues: - CVE-2026-47183: zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion (boo#1268342) - CVE-2026-47184: zeroconf has unbounded DNS record cache that allows LAN-local memory exhaustion via multicast flood (boo#1268343) - CVE-2026-48487: python-zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet (boo#1268235)

• Release Date
  Jun 25 2026
• References
  Bugzilla: 1268343, 1268342, 1268235
  CVEs: CVE-2026-48487, CVE-2026-47184, CVE-2026-47183
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.7 s390x

• Packages
  python3-zeroconf
  Pure Python Multicast DNS Service Discovery Library (Bonjour/Avahi compatible)

  0.25.1-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  python3-zeroconf
  Pure Python Multicast DNS Service Discovery Library (Bonjour/Avahi compatible)

  0.25.1-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  python3-zeroconf
  Pure Python Multicast DNS Service Discovery Library (Bonjour/Avahi compatible)

  0.25.1-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  python3-zeroconf
  Pure Python Multicast DNS Service Discovery Library (Bonjour/Avahi compatible)

  0.25.1-bp157.2.3.1 lock rpm