Hi Salvatore, On Sat, Sep 26, 2026 at 1:49 PM Salvatore Bonaccorso <[email protected]> wrote: > Forwarded: https://github.com/libvips/libvips/issues/5187 [...] > CVE-2026-88360[0]: > | libvips 8.19.0 contains a memory access vulnerability when Please note that the newest upstream release [1] is v8.18.7 in two hours. There is no v8.19.0 release. The issue you link to (#5187) is from August 16th and upstream cites this as not a security issue [2]. Even blocked this agent [3].
Regards, Laszlo/GCS [1] https://github.com/libvips/libvips/releases [2] https://github.com/libvips/libvips/issues/5187#issuecomment-5829413830 [3] https://github.com/libvips/libvips/issues/5187#event-31843470458
