[Pkg-utopia-maintainers] Bug#1132712: avahi: CVE-2026-34933 - fix 0be89b6bb5c3 (in v0.9-rc4) applies cleanly to 0.8-18 and 0.8-16

[Sumit Verma]

Control: tags -1 + fixed-upstream

Hi,

The two commits listed in the security tracker:

0be89b6bb5c3 "core: refuse to accept publish flags where both
wide_area and multicast are set" (the fix)
a93fdd980d2d "tests: make sure AVAHI_PUBLISH_USE_WIDE_AREA is refused"

are on master and in v0.9-rc4/rc5, but not in a 0.8.x release. Applied
in that order to unstable 0.8-18 and trixie 0.8-16 (sources from
https://www.google.com/url?q=http://sources.debian.org&source=gmail&ust=1793800197318000&sa=E,
Debian patches included), both apply cleanly with no
offsets or fuzz.

Mechanical patch-applies check only; not built or tested.

Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-utopia-maintainers/attachments/20261103/958db0ff/attachment.htm>