Collin Funk <[email protected]> writes: > FYI, CVE-2026-56392 and CVE-2026-56391 were assigned to GNU patch.
I meant CVE-2026-56288 and CVE-2026-56289, of course. One downside of pointless CVEs is they are easy to mix up. :) Collin > [1] https://security-tracker.debian.org/tracker/CVE-2026-56288 > [2] https://security-tracker.debian.org/tracker/CVE-2026-56289
