Hi Laszlo, On Sat, Sep 26, 2026 at 03:33:46PM +0200, László Böszörményi (GCS) wrote: > Hi Salvatore, > > On Sat, Sep 26, 2026 at 1:49 PM Salvatore Bonaccorso <[email protected]> > wrote: > > Forwarded: https://github.com/libvips/libvips/issues/5187 > [...] > > CVE-2026-88360[0]: > > | libvips 8.19.0 contains a memory access vulnerability when > Please note that the newest upstream release [1] is v8.18.7 in two > hours. There is no v8.19.0 release. The issue you link to (#5187) is > from August 16th and upstream cites this as not a security issue [2]. > Even blocked this agent [3].
Thanks a lot for pointing that out. Unfortunately I missed since we have quite a lot of CVEs to handle. I have marked for now the CVE as unimportant stating it is not a security issue. The CVE should really be rejected :( Regards, Salvatore
