On Mon, Nov 2, 2026 at 9:06 PM Salvatore Bonaccorso <[email protected]> wrote: > I was wrong though, there is one which is likely not fixed yet and > we should split it ip from this bugreport, CVE-2026-119586 does not > seem to be addressed yet in neither 3.54.1. That is correct, the 3.54.1 version is still vulnerable to CVE-2026-119586. I just uploaded the mentioned version fixing the other vulnerabilities. I will ping you when I know more and please do the same if you get more information.
Regards, Laszlo/GCS

