--- Comment #13 from Salvatore Bonaccorso <carnil(a)debian.org> ---
The fixes as released in 1.10.4 and 1.9.12 were incomplete, there was a
respective followup with
I requested a CVE for the incomplete fix to CVE-2018-10886.
You are receiving this mail because:
You are on the CC list for the bug.