CVE-2025-68276: refuse to create wide-area record browsers when
wide-area lookups are disabled; an unprivileged local user could crash
avahi-daemon over D-Bus by passing AVAHI_LOOKUP_USE_WIDE_AREA to
RecordBrowserNew, reaching an assertion in avahi_wide_area_scan_cache
CVE-2026-34933: reject publish flags that set both
AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST; the
conflicting pair tripped an assertion in transport_flags_from_domain
and crashed avahi-daemon from any unprivileged local D-Bus caller