CVE-2021-26720 only applies to Debian's packaging of avahi. https://nvd.nist.gov/vuln/detail/CVE-2021-26720