Control: tags -1 + fixed-upstream Hi,
The two commits listed in the security tracker: 0be89b6bb5c3 "core: refuse to accept publish flags where both wide_area and multicast are set" (the fix) a93fdd980d2d "tests: make sure AVAHI_PUBLISH_USE_WIDE_AREA is refused" are on master and in v0.9-rc4/rc5, but not in a 0.8.x release. Applied in that order to unstable 0.8-18 and trixie 0.8-16 (sources from https://www.google.com/url?q=http://sources.debian.org&source=gmail&ust=1793800197318000&sa=E, Debian patches included), both apply cleanly with no offsets or fuzz. Mechanical patch-applies check only; not built or tested. Regards

